Prisma Cloud Compute:Defender 无法执行主机扫描(漏洞和合规性),错误:EOF

Prisma Cloud Compute:Defender 无法执行主机扫描(漏洞和合规性),错误:EOF

3906
Created On 12/14/22 09:12 AM - Last Modified 12/27/24 08:32 AM


Symptom


  • Defender failed to perform host scan (vulnerability and compliance) with ERROR: EOF在 WebUI 上

eof.png
  • 在防御者上,你会看到以下错误消息:
DEBU 2022-11-28T18:05:08.882 scanner.go:412 Scanning host 
DEBU 2022-11-28T18:05:09.101 dump.go:379 Twistlock defender completed with an error: failed resolving commands for host scanning: /go/src/twistlock/pkg/scan/hos t/evaluator_host.go:4807 stat /host/etc/KubeletConfiguration.yaml: no such file or directory 
ERRO 2022-11-28T18:05:09.110 host_scanner_client.go:122 Failed waiting on host scan command: exit status 1 
ERRO 2022-11-28T18:05:09.110 scanner.go:422 Failed executing host scanning: EOF




Environment


  • Prisma 云计算
  • 主机漏洞/合规性扫描
  • RKE(Rancher Kubernetes 引擎)


Cause


  • 在 Prisma Cloud Compute 中,防御者不支持所有版本的 RKE。
    • 根据最新的管理员指南,Prisma Cloud Compute 仅支持 RKE 版本:
      • RKE2 v1.22.5+rke2r1 (containerd 1.5.8-k3s)
      • RKE2 v1.24.4+rke2r1 (containerd 1.6.6-k3s1)
  • 如果 RKE 版本不受支持,防御者将无法正确检测底层主机信息。


Resolution


  • 根据Rancher将 RKE 集群升级到支持的版本,并重新启动防御者。


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sa8nCAA&lang=zh_CN&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language