Aws-network-policy-agent

• https://github.com/aws/aws-network-policy-agent
• Versions: v1.0.8, v1.0.7, v1.0.6

aws-eks-na-cli ebpf -h

.../...
aws-eks-nodeagent:
   Image:      1234567890.dkr.ecr.eu-west-3.amazonaws.com/amazon/aws-network-policy-agent:v1.0.8-eksbuild.1
   Port:       <none>
   Host Port:  <none>
   Args:
     --enable-ipv6=false
     --enable-network-policy=false
     --enable-cloudwatch-logs=false
     --enable-policy-event-logs=false
     --metrics-bind-addr=:8162
     --health-probe-bind-addr=:8163
     --conntrack-cache-cleanup-period=300
   Requests:
     cpu:  25m
   Environment:
     MY_NODE_NAME:   (v1:spec.nodeName)
   Mounts:
     /host/opt/cni/bin from cni-bin-dir (rw)
     /sys/fs/bpf from bpf-pin-path (rw)
     /var/log/aws-routed-eni from log-dir (rw)
     /var/run/aws-node from run-dir (rw)
.../...

Feb 28 11:02:34 ip-10-226-24-215.c dockerd[5429]: time="2024-02-28T11:02:34.205684887Z" level=error msg="Handler for GET /v1.41/images/123456789.dkr.ecr.eu-west-3.amazonaws.com/amazon/aws-network-policy-agent:v1.0.8-eksbuild.1/json returned error: readlink /var/lib/docker/overlay2: invalid argument"

aws-eks-nodeagent

Error from server (BadRequest): container "aws-eks-nodeagent" in pod "aws-node-kjz6s" is waiting to start: ImageInspectError

See also

• aws-node, ipamd, kubectl logs -n kube-system aws-node, aws-vpc-cni-init, aws-node, aws-eks-nodeagent
• AWS VPC CNI, aws-node (ipamd): (aws-node, aws-eks-nodeagent, aws-vpc-cni-init), cluster_addons: vpc-cni, aws-network-policy-agent: aws-eks-na-cli, AmazonEKS_CNI_Policy, AmazonEKS_CNI_Policy