Prisma Cloud Compute: Defender failed to perform host scan (vulnerability and compliance) with ERROR: EOF

Prisma Cloud Compute: Defender failed to perform host scan (vulnerability and compliance) with ERROR: EOF

3892
Created On 12/14/22 09:12 AM - Last Modified 12/12/24 17:29 PM


Symptom


  • Defender failed to perform host scan (vulnerability and compliance) with ERROR: EOF on WebUI

eof.png
  • On the defender, you would see the error message below:
DEBU 2022-11-28T18:05:08.882 scanner.go:412 Scanning host 
DEBU 2022-11-28T18:05:09.101 dump.go:379 Twistlock defender completed with an error: failed resolving commands for host scanning: /go/src/twistlock/pkg/scan/hos t/evaluator_host.go:4807 stat /host/etc/KubeletConfiguration.yaml: no such file or directory 
ERRO 2022-11-28T18:05:09.110 host_scanner_client.go:122 Failed waiting on host scan command: exit status 1 
ERRO 2022-11-28T18:05:09.110 scanner.go:422 Failed executing host scanning: EOF


 



Environment


  • Prisma Cloud Compute
  • Host Vulnerability/Compliance Scan
  • RKE (Rancher Kubernetes Engine)


Cause


  • In Prisma Cloud Compute, the defender doesn't support all versions of RKE.
    • Based on the latest admin guide ,Prisma Cloud Compute only supports RKE versions:
      • RKE2 v1.22.5+rke2r1 (containerd 1.5.8-k3s)
      • RKE2 v1.24.4+rke2r1 (containerd 1.6.6-k3s1)
  • With unsupported RKE versions, the defender will not be able to detect underlying host information correctly.


Resolution


  • Upgrade the RKE cluster to a supported version according to Rancher and restart the defender.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sa8nCAA&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language