Aqua not allowing TKGI upgrade-cluster operation to succeed

Products

• VMware Tanzu Kubernetes Grid Integrated Edition

Issue/Introduction

When performing an operation on the TKGI cluster fails to unmount node persistent disk as per below error. 

Instance update failed: There was a problem completing your request. Please contact your operations team providing the following information: service: p.pks, service-instance-guid: ##############################, broker-request-id: ##############################,task-id: #######, operation: update, error-message: Action Failed get_task: Task ############################## result: Unmounting persistent disk: Running command: 'umount /dev/sdc1', stdout: '', stderr: 'umount: /var/vcap/store: target is busy.': exit status 32

 

 

 

Cause

Containerd is unable to unmount persistent disk as Aqua is performing scans and locking /var/vcap/store/containerd/tmpmounts/xxxx therefore it times out due to EBUSY signals.

Resolution

This issue is happening with version 2022.4.588 of Aqua Security Software and it is fixed in 2022.4.662.

The new versions excludes /var/vcap.