Scanner ERROR "Failed to registry ..."

This document (000020923) is provided subject to the disclaimer at the end of this document.

Situation

From the WebUI with auto-scan enabled, all containers are in a Scheduled state. A review of the scanner reports the following:

2021-11-01T15:36:55.256|INFO|SCN|main.scannerRegisterStream: Stream register API is not supported
2021-11-01T15:36:55.256|ERRO|SCN|main.scannerRegister: Failed to register - error=rpc error: code = DeadlineExceeded desc = context deadline exceeded
2021-11-01T15:37:05.258|DEBU|SCN|main.scannerRegister: - entries=57737 join=neuvector-svc-controller.neuvector:18400 version=2.478

Similarly, the controller also throws the following error.

2021-11-01T15:37:25.259|ERRO|CTL|main.(*ScanService).ScannerRegisterStream: Receive error - error=rpc error: code = DeadlineExceeded desc = context deadline exceeded

The error seem to suggest a networking issue but in fact this is due to resource limit set too low for the scanner to complete the startup action of streaming data to the controller.

Typically, the scanner uses low level of resource when idle. It balloons to the size of the image to be scanned. If a resource limit needs to be configure, set it to a value higher to the larger image that will be scanned.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.