pkg/sensors: pin the ratelimit_map to the fs

Signed-off-by: Mahe Tardy <mahe.tardy@gmail.com>
cilium · Jun 14, 2024 · 38ab012 · 38ab012
1 parent ed824b3
commit 38ab012
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/pkg/sensors/tracing/generickprobe.go b/pkg/sensors/tracing/generickprobe.go
@@ -344,6 +344,11 @@ func createMultiKprobeSensor(sensorPath, policyName string, multiIDs []idtable.E
 		maps = append(maps, socktrack)
 	}
 
+	if kernels.EnableLargeProgs() {
+		ratelimitMap := program.MapBuilderPin("ratelimit_map", sensors.PathJoin(sensorPath, "ratelimit_map"), load)
+		maps = append(maps, ratelimitMap)
+	}
+
 	enforcerDataMap := enforcerMap(policyName, load)
 	maps = append(maps, enforcerDataMap)
 
@@ -900,6 +905,11 @@ func createKprobeSensorFromEntry(kprobeEntry *genericKprobe, sensorPath string,
 		maps = append(maps, socktrack)
 	}
 
+	if kernels.EnableLargeProgs() {
+		ratelimitMap := program.MapBuilderPin("ratelimit_map", sensors.PathJoin(sensorPath, "ratelimit_map"), load)
+		maps = append(maps, ratelimitMap)
+	}
+
 	enforcerDataMap := enforcerMap(kprobeEntry.policyName, load)
 	maps = append(maps, enforcerDataMap)