Cluster: 'setcap' error on each node after installation (Operation not permitted)

[superzerosec]

Hi,

I'm deploying 2x workers and 1x manager node. When I run zeekctl install or zeekctl deploy on manager node, workers keep crashing with error (Operation not permitted).

I configure zeekctl-setcap plugin as here to automatically executing 'setcap' on each node after installation.

Appreciate if can patch this bug.

Thanks.

zeekctl==2.5.0
zeek==7.0.3

[awelzel]

Please provide the full output of your zeekctl session, including the diag output of a worker, too. Thanks!