Skip to content

Commit f14ee18

Browse files
authored
Merge pull request #155 from prequel-dev/fix/cre-2025-0026
fix cre-2025-0026 detection
2 parents d53a7bd + 66d1c83 commit f14ee18

File tree

3 files changed

+50
-1
lines changed

3 files changed

+50
-1
lines changed

VERSION

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
0.3.47
1+
0.3.48
Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
rules:
2+
- cre:
3+
id: CRE-2025-0201
4+
severity: 3
5+
title: The snapshot functionality of the AWS EBS CSI Driver is failing.
6+
category: storage-problem
7+
author: Prequel
8+
description: |
9+
The AWS EBS CSI driver, fails to list `VolumeSnapshotClass` and `VolumeSnapshotContent`.
10+
cause: |
11+
To manipulate snapshots of a Kubernetes `PersistentVolume` backed by the AWS EBS CSI driver, the installation of external-snapshotter is required.
12+
tags:
13+
- ebs
14+
- csi
15+
- aws
16+
- storage
17+
- public
18+
mitigation: |
19+
- Install external-snapshotter
20+
references:
21+
- https://github.com/kubernetes-sigs/aws-ebs-csi-driver/issues/1447#issuecomment-1664682557
22+
- https://github.com/kubernetes-csi/external-snapshotter
23+
applications:
24+
- name: aws-ebs-csi-driver
25+
version: 1.26.1
26+
imageUrl: public.ecr.aws/eks/aws-ebs-csi-driver:v1.25.0
27+
containerName: ebs-csi-controller
28+
impact: degraded volume snapshotting functionality
29+
impactScore: 3
30+
mitigationScore: 1
31+
reports: 4
32+
metadata:
33+
kind: prequel
34+
id: 3o6P1D452JrSTHb3449WcB
35+
gen: 1
36+
rule:
37+
set:
38+
event:
39+
source: cre.log.ebs-csi-snapshotter
40+
window: 1m
41+
match:
42+
- value: Unhandled Error
43+
- value: Failed to watch *v1.VolumeSnapshotClass
44+
- value: Failed to watch *v1.VolumeSnapshotContent
45+
- value: the server could not find the requested resource (get volumesnapshotclasses.snapshot.storage.k8s.io)
46+
- value: the server could not find the requested resource (get volumesnapshotcontents.snapshot.storage.k8s.io)

rules/cre-2025-0202/test.log

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
E0413 23:38:00.000000 1 reflector.go:158] "Unhandled Error" err="k8s.io/client-go@v0.31.3/tools/cache/reflector.go:243: Failed to watch *v1.VolumeSnapshotContent: failed to list *v1.VolumeSnapshotContent: the server could not find the requested resource (get volumesnapshotcontents.snapshot.storage.k8s.io)" logger="UnhandledError"
2+
E0413 23:38:00.000002 1 reflector.go:158] "Unhandled Error" err="k8s.io/client-go@v0.31.3/tools/cache/reflector.go:243: Failed to watch *v1.VolumeSnapshotClass: failed to list *v1.VolumeSnapshotClass: the server could not find the requested resource (get volumesnapshotclasses.snapshot.storage.k8s.io)" logger="UnhandledError"
3+
E0413 23:38:00.874041 1 reflector.go:158] "Unhandled Error" err="k8s.io/client-go@v0.31.3/tools/cache/reflector.go:243: Failed to watch *v1.VolumeSnapshotClass: failed to list *v1.VolumeSnapshotClass: the server could not find the requested resource (get volumesnapshotclasses.snapshot.storage.k8s.io)" logger="UnhandledError"

0 commit comments

Comments
 (0)