UMA node JS auto attach fails

Products

• DX SaaS

Issue/Introduction

UMA Node.js auto-attach fails with permission errors

Defaulted container "ss1-signin" out of: ss1-signin, ss1-ui-helper (init), nodejs-probe-autoattach (init)

Argument Initial  APM_ENV_PROBENAME :
Argument Latest  APM_ENV_PROBENAME : ss1
cp: can't create directory '/signin/node_modules/ca-apm-probe': Read-only file system
Nodejs Probe '/signin/node_modules/ca-apm-probe' copy failed
Nodejs Probe Status: 2
Nodejs Probe - file probe-autoattach.cmd not found
Nodejs Probe - instrumentation failure code: 4

Cause

NodeJS container has readOnlyRootFilesystem enabled
NodeJS container has runAsNonRoot enabled
NodeJS container has allowPrivilegeEscalation disabled
NodeJS container is a busybox image so su is not allowed (setuid is disabled on the su command)

If the above configurations are in place, then the UMA auto attach function for node JS application does not work.

Resolution

The workaround is to disable runAsNonRoot and readOnlyRootFilesystem

Once above two configurations are  in place, then UMA auto attach function for node JS application does work successfully.