[BUG] Defender Pods Fail to Read Memory Metrics Due to cgroup v2 Change After Upgrade from Kubernetes 1.27 to 1.30

[VincentSchmid]

Describe the bug
From Sept 4 Defender pods stopped to read memory metrics because of changes cgroup to V2. (upgrade kubernetes from 1.27 to 1.30)

Now microsoft-defender-collector-ds pods spams:

level=error msg="Failed to get max memory usage with error: open /sys/fs/cgroup/memory.peak: no such file or directory"
level=error msg="Failed to get memory usage with error: open /sys/fs/cgroup/memory.current: no such file or directory"
level=info msg="Heartbeat: {\"Performance\":{\"Memory\":\"11Mi\"}}"

microsoft-defender-publisher-ds spams:

level=error msg="Failed to get max memory usage with error: open /sys/fs/cgroup/memory.peak: no such file or directory"
level=info msg="Heartbeat: {\"Cloud Native Identifier\":\"\",\"Events\":[],\"Kernel Version\":\"5.15.0-1073-azure\",\"Performance\":{\"CurrMemoryUsageInMb\":96.44921875,\"MaxMemoryUsageInMb\":-1}}"

Expected behavior
Reading the correct system files

Environment (please complete the following information):

• Kubernetes version 1.30.5
• Pod image - mcr.microsoft.com/azuredefender/stable/pod-collector:1.0.110
• Pod image - mcr.microsoft.com/azuredefender/stable/security-publisher:1.0.148
• Kubernetes node image - AKSUbuntu-2204gen2containerd-202410.15.0
• Kubernetes kernel version - 5.15.0-1073-azure

Additional context
Add any other context about the problem here.

[microsoft-github-policy-service]

@miwithrow, @CocoWang-wql would you be able to assist?

[Jon-Hawkins]

I am also having this issue. Any ideas?

[mmillard0]

We have the same issue with AKS 1.30.5. Any update ?

[microsoft-github-policy-service]

Action required from @aritraghosh, @julia-yin, @AllenWen-at-Azure

[microsoft-github-policy-service]

Issue needing attention of @Azure/aks-leads

[microsoft-github-policy-service]

Issue needing attention of @Azure/aks-leads

[microsoft-github-policy-service]

Issue needing attention of @Azure/aks-leads

[microsoft-github-policy-service]

Issue needing attention of @Azure/aks-leads

[microsoft-github-policy-service]

Issue needing attention of @Azure/aks-leads