Oct 2 19:09:03.912428 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:09:03.912477 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:09:03.912508 kernel: BIOS-provided physical RAM map: Oct 2 19:09:03.912523 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 19:09:03.912531 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Oct 2 19:09:03.912538 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Oct 2 19:09:03.912611 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Oct 2 19:09:03.912621 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Oct 2 19:09:03.912628 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Oct 2 19:09:03.912640 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Oct 2 19:09:03.912647 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Oct 2 19:09:03.912655 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Oct 2 19:09:03.912664 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Oct 2 19:09:03.912671 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Oct 2 19:09:03.912681 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Oct 2 19:09:03.912691 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Oct 2 19:09:03.912699 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Oct 2 19:09:03.912707 kernel: NX (Execute Disable) protection: active Oct 2 19:09:03.912724 kernel: e820: update [mem 0x9b3f7018-0x9b400c57] usable ==> usable Oct 2 19:09:03.912732 kernel: e820: update [mem 0x9b3f7018-0x9b400c57] usable ==> usable Oct 2 19:09:03.912740 kernel: e820: update [mem 0x9b1aa018-0x9b1e6e57] usable ==> usable Oct 2 19:09:03.912765 kernel: e820: update [mem 0x9b1aa018-0x9b1e6e57] usable ==> usable Oct 2 19:09:03.912775 kernel: extended physical RAM map: Oct 2 19:09:03.912784 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 19:09:03.912793 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Oct 2 19:09:03.912805 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Oct 2 19:09:03.912813 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Oct 2 19:09:03.912821 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Oct 2 19:09:03.912829 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Oct 2 19:09:03.912837 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Oct 2 19:09:03.912844 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b1aa017] usable Oct 2 19:09:03.912852 kernel: reserve setup_data: [mem 0x000000009b1aa018-0x000000009b1e6e57] usable Oct 2 19:09:03.912860 kernel: reserve setup_data: [mem 0x000000009b1e6e58-0x000000009b3f7017] usable Oct 2 19:09:03.912868 kernel: reserve setup_data: [mem 0x000000009b3f7018-0x000000009b400c57] usable Oct 2 19:09:03.912877 kernel: reserve setup_data: [mem 0x000000009b400c58-0x000000009c8eefff] usable Oct 2 19:09:03.912885 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Oct 2 19:09:03.912896 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Oct 2 19:09:03.912906 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Oct 2 19:09:03.912916 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Oct 2 19:09:03.912926 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Oct 2 19:09:03.912939 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Oct 2 19:09:03.912947 kernel: efi: EFI v2.70 by EDK II Oct 2 19:09:03.912956 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b773018 RNG=0x9cb75018 Oct 2 19:09:03.912973 kernel: random: crng init done Oct 2 19:09:03.912984 kernel: SMBIOS 2.8 present. Oct 2 19:09:03.912993 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 0.0.0 02/06/2015 Oct 2 19:09:03.913002 kernel: Hypervisor detected: KVM Oct 2 19:09:03.913011 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:09:03.913019 kernel: kvm-clock: cpu 0, msr 35f8a001, primary cpu clock Oct 2 19:09:03.913028 kernel: kvm-clock: using sched offset of 4570533313 cycles Oct 2 19:09:03.913079 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:09:03.913090 kernel: tsc: Detected 2794.748 MHz processor Oct 2 19:09:03.913103 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:09:03.913112 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:09:03.913126 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Oct 2 19:09:03.913142 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:09:03.913153 kernel: Using GB pages for direct mapping Oct 2 19:09:03.913163 kernel: Secure boot disabled Oct 2 19:09:03.913173 kernel: ACPI: Early table checksum verification disabled Oct 2 19:09:03.913182 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Oct 2 19:09:03.913192 kernel: ACPI: XSDT 0x000000009CB7D0E8 00004C (v01 BOCHS BXPC 00000001 01000013) Oct 2 19:09:03.913217 kernel: ACPI: FACP 0x000000009CB7A000 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:09:03.913226 kernel: ACPI: DSDT 0x000000009CB7B000 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:09:03.913234 kernel: ACPI: FACS 0x000000009CBDD000 000040 Oct 2 19:09:03.913243 kernel: ACPI: APIC 0x000000009CB79000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:09:03.913253 kernel: ACPI: HPET 0x000000009CB78000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:09:03.913262 kernel: ACPI: WAET 0x000000009CB77000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:09:03.913278 kernel: ACPI: BGRT 0x000000009CB76000 000038 (v01 INTEL EDK2 00000002 01000013) Oct 2 19:09:03.913289 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb7a000-0x9cb7a073] Oct 2 19:09:03.913305 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7b000-0x9cb7ca38] Oct 2 19:09:03.913318 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Oct 2 19:09:03.913326 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb79000-0x9cb7908f] Oct 2 19:09:03.913343 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb78000-0x9cb78037] Oct 2 19:09:03.913352 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb77000-0x9cb77027] Oct 2 19:09:03.913361 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb76000-0x9cb76037] Oct 2 19:09:03.913377 kernel: No NUMA configuration found Oct 2 19:09:03.913395 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Oct 2 19:09:03.913405 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Oct 2 19:09:03.913414 kernel: Zone ranges: Oct 2 19:09:03.913426 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:09:03.913440 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Oct 2 19:09:03.913449 kernel: Normal empty Oct 2 19:09:03.913458 kernel: Movable zone start for each node Oct 2 19:09:03.913466 kernel: Early memory node ranges Oct 2 19:09:03.913475 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 2 19:09:03.913484 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Oct 2 19:09:03.913493 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Oct 2 19:09:03.913502 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Oct 2 19:09:03.913512 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Oct 2 19:09:03.913522 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Oct 2 19:09:03.913530 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Oct 2 19:09:03.913539 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:09:03.913570 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 2 19:09:03.913579 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Oct 2 19:09:03.913587 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:09:03.913596 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Oct 2 19:09:03.913604 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Oct 2 19:09:03.913616 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Oct 2 19:09:03.913625 kernel: ACPI: PM-Timer IO Port: 0xb008 Oct 2 19:09:03.913635 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:09:03.913644 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:09:03.913653 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 19:09:03.913662 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:09:03.913672 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:09:03.913681 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:09:03.913690 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:09:03.913700 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:09:03.913709 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:09:03.913718 kernel: TSC deadline timer available Oct 2 19:09:03.913727 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Oct 2 19:09:03.913736 kernel: kvm-guest: KVM setup pv remote TLB flush Oct 2 19:09:03.913746 kernel: kvm-guest: setup PV sched yield Oct 2 19:09:03.913755 kernel: [mem 0x9d000000-0xffffffff] available for PCI devices Oct 2 19:09:03.913764 kernel: Booting paravirtualized kernel on KVM Oct 2 19:09:03.913773 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:09:03.913792 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Oct 2 19:09:03.913804 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u524288 Oct 2 19:09:03.913814 kernel: pcpu-alloc: s185624 r8192 d31464 u524288 alloc=1*2097152 Oct 2 19:09:03.913828 kernel: pcpu-alloc: [0] 0 1 2 3 Oct 2 19:09:03.913840 kernel: kvm-guest: setup async PF for cpu 0 Oct 2 19:09:03.913850 kernel: kvm-guest: stealtime: cpu 0, msr 9ae1c0c0 Oct 2 19:09:03.913859 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:09:03.913893 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:09:03.913904 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Oct 2 19:09:03.913913 kernel: Policy zone: DMA32 Oct 2 19:09:03.913928 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:09:03.913940 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:09:03.913952 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:09:03.913962 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:09:03.913972 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:09:03.913982 kernel: Memory: 2400436K/2567000K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 166304K reserved, 0K cma-reserved) Oct 2 19:09:03.913994 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:09:03.914004 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:09:03.914014 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:09:03.914024 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:09:03.914035 kernel: rcu: RCU event tracing is enabled. Oct 2 19:09:03.914045 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:09:03.914055 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:09:03.914065 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:09:03.914075 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:09:03.914086 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:09:03.914096 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Oct 2 19:09:03.914105 kernel: Console: colour dummy device 80x25 Oct 2 19:09:03.914114 kernel: printk: console [ttyS0] enabled Oct 2 19:09:03.914123 kernel: ACPI: Core revision 20210730 Oct 2 19:09:03.914132 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Oct 2 19:09:03.914141 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:09:03.914150 kernel: x2apic enabled Oct 2 19:09:03.914159 kernel: Switched APIC routing to physical x2apic. Oct 2 19:09:03.914168 kernel: kvm-guest: setup PV IPIs Oct 2 19:09:03.914180 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 19:09:03.914190 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 19:09:03.914200 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Oct 2 19:09:03.914209 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Oct 2 19:09:03.914219 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Oct 2 19:09:03.914228 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Oct 2 19:09:03.914237 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:09:03.914246 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:09:03.914257 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:09:03.914267 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:09:03.914276 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Oct 2 19:09:03.914286 kernel: RETBleed: Mitigation: untrained return thunk Oct 2 19:09:03.914296 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Oct 2 19:09:03.914306 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Oct 2 19:09:03.914316 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:09:03.914325 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:09:03.914335 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:09:03.914346 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:09:03.914355 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Oct 2 19:09:03.914365 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:09:03.914374 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:09:03.914383 kernel: LSM: Security Framework initializing Oct 2 19:09:03.914392 kernel: SELinux: Initializing. Oct 2 19:09:03.914402 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:09:03.914412 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:09:03.914421 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Oct 2 19:09:03.914439 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Oct 2 19:09:03.914448 kernel: ... version: 0 Oct 2 19:09:03.914458 kernel: ... bit width: 48 Oct 2 19:09:03.914468 kernel: ... generic registers: 6 Oct 2 19:09:03.914477 kernel: ... value mask: 0000ffffffffffff Oct 2 19:09:03.914485 kernel: ... max period: 00007fffffffffff Oct 2 19:09:03.914495 kernel: ... fixed-purpose events: 0 Oct 2 19:09:03.914518 kernel: ... event mask: 000000000000003f Oct 2 19:09:03.914530 kernel: signal: max sigframe size: 1776 Oct 2 19:09:03.914541 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:09:03.914562 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:09:03.914572 kernel: x86: Booting SMP configuration: Oct 2 19:09:03.914580 kernel: .... node #0, CPUs: #1 Oct 2 19:09:03.914589 kernel: kvm-clock: cpu 1, msr 35f8a041, secondary cpu clock Oct 2 19:09:03.914598 kernel: kvm-guest: setup async PF for cpu 1 Oct 2 19:09:03.914607 kernel: kvm-guest: stealtime: cpu 1, msr 9ae9c0c0 Oct 2 19:09:03.914616 kernel: #2 Oct 2 19:09:03.914626 kernel: kvm-clock: cpu 2, msr 35f8a081, secondary cpu clock Oct 2 19:09:03.914649 kernel: kvm-guest: setup async PF for cpu 2 Oct 2 19:09:03.914711 kernel: kvm-guest: stealtime: cpu 2, msr 9af1c0c0 Oct 2 19:09:03.914728 kernel: #3 Oct 2 19:09:03.914763 kernel: kvm-clock: cpu 3, msr 35f8a0c1, secondary cpu clock Oct 2 19:09:03.914790 kernel: kvm-guest: setup async PF for cpu 3 Oct 2 19:09:03.914816 kernel: kvm-guest: stealtime: cpu 3, msr 9af9c0c0 Oct 2 19:09:03.914836 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:09:03.914871 kernel: smpboot: Max logical packages: 1 Oct 2 19:09:03.914908 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Oct 2 19:09:03.914946 kernel: devtmpfs: initialized Oct 2 19:09:03.914998 kernel: x86/mm: Memory block size: 128MB Oct 2 19:09:03.915013 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Oct 2 19:09:03.915040 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Oct 2 19:09:03.915058 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Oct 2 19:09:03.915081 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Oct 2 19:09:03.915112 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Oct 2 19:09:03.915134 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:09:03.915144 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:09:03.915159 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:09:03.915189 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:09:03.915199 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:09:03.915209 kernel: audit: type=2000 audit(1696273742.746:1): state=initialized audit_enabled=0 res=1 Oct 2 19:09:03.915227 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:09:03.915252 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:09:03.915269 kernel: cpuidle: using governor menu Oct 2 19:09:03.915280 kernel: ACPI: bus type PCI registered Oct 2 19:09:03.915290 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:09:03.915316 kernel: dca service started, version 1.12.1 Oct 2 19:09:03.915345 kernel: PCI: Using configuration type 1 for base access Oct 2 19:09:03.915368 kernel: PCI: Using configuration type 1 for extended access Oct 2 19:09:03.915406 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:09:03.915424 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:09:03.915439 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:09:03.915449 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:09:03.915482 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:09:03.915491 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:09:03.915498 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:09:03.915507 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:09:03.915514 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:09:03.915521 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:09:03.915528 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:09:03.915542 kernel: ACPI: Interpreter enabled Oct 2 19:09:03.915559 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 19:09:03.915578 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:09:03.915585 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:09:03.915592 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 19:09:03.915601 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:09:03.915939 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:09:03.915967 kernel: acpiphp: Slot [3] registered Oct 2 19:09:03.915974 kernel: acpiphp: Slot [4] registered Oct 2 19:09:03.915981 kernel: acpiphp: Slot [5] registered Oct 2 19:09:03.915988 kernel: acpiphp: Slot [6] registered Oct 2 19:09:03.915994 kernel: acpiphp: Slot [7] registered Oct 2 19:09:03.916010 kernel: acpiphp: Slot [8] registered Oct 2 19:09:03.916024 kernel: acpiphp: Slot [9] registered Oct 2 19:09:03.916046 kernel: acpiphp: Slot [10] registered Oct 2 19:09:03.916060 kernel: acpiphp: Slot [11] registered Oct 2 19:09:03.916066 kernel: acpiphp: Slot [12] registered Oct 2 19:09:03.916073 kernel: acpiphp: Slot [13] registered Oct 2 19:09:03.916111 kernel: acpiphp: Slot [14] registered Oct 2 19:09:03.916119 kernel: acpiphp: Slot [15] registered Oct 2 19:09:03.916137 kernel: acpiphp: Slot [16] registered Oct 2 19:09:03.916144 kernel: acpiphp: Slot [17] registered Oct 2 19:09:03.916151 kernel: acpiphp: Slot [18] registered Oct 2 19:09:03.916159 kernel: acpiphp: Slot [19] registered Oct 2 19:09:03.916166 kernel: acpiphp: Slot [20] registered Oct 2 19:09:03.916173 kernel: acpiphp: Slot [21] registered Oct 2 19:09:03.916179 kernel: acpiphp: Slot [22] registered Oct 2 19:09:03.916204 kernel: acpiphp: Slot [23] registered Oct 2 19:09:03.916216 kernel: acpiphp: Slot [24] registered Oct 2 19:09:03.916222 kernel: acpiphp: Slot [25] registered Oct 2 19:09:03.916229 kernel: acpiphp: Slot [26] registered Oct 2 19:09:03.916236 kernel: acpiphp: Slot [27] registered Oct 2 19:09:03.916251 kernel: acpiphp: Slot [28] registered Oct 2 19:09:03.916269 kernel: acpiphp: Slot [29] registered Oct 2 19:09:03.916289 kernel: acpiphp: Slot [30] registered Oct 2 19:09:03.916324 kernel: acpiphp: Slot [31] registered Oct 2 19:09:03.916339 kernel: PCI host bridge to bus 0000:00 Oct 2 19:09:03.916565 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:09:03.916747 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:09:03.917005 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:09:03.917270 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Oct 2 19:09:03.917457 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0x87fffffff window] Oct 2 19:09:03.917602 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:09:03.917759 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:09:03.918075 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:09:03.918362 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 19:09:03.918543 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Oct 2 19:09:03.918809 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 19:09:03.919001 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 19:09:03.919150 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 19:09:03.919236 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 19:09:03.919329 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 19:09:03.919405 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Oct 2 19:09:03.919511 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Oct 2 19:09:03.919624 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Oct 2 19:09:03.919697 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Oct 2 19:09:03.919767 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xc1043000-0xc1043fff] Oct 2 19:09:03.919838 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Oct 2 19:09:03.919921 kernel: pci 0000:00:02.0: BAR 0: assigned to efifb Oct 2 19:09:03.919993 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:09:03.920081 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:09:03.920156 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc0a0-0xc0bf] Oct 2 19:09:03.920238 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Oct 2 19:09:03.920312 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Oct 2 19:09:03.920390 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 19:09:03.920472 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 19:09:03.920596 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Oct 2 19:09:03.920724 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Oct 2 19:09:03.920871 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Oct 2 19:09:03.921015 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc080-0xc09f] Oct 2 19:09:03.921140 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xc1040000-0xc1040fff] Oct 2 19:09:03.921220 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Oct 2 19:09:03.921306 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Oct 2 19:09:03.921316 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:09:03.921327 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:09:03.921334 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:09:03.921341 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:09:03.921348 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:09:03.921355 kernel: iommu: Default domain type: Translated Oct 2 19:09:03.921361 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:09:03.921512 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 19:09:03.921737 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:09:03.922646 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 19:09:03.922665 kernel: vgaarb: loaded Oct 2 19:09:03.922672 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:09:03.922679 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:09:03.922686 kernel: PTP clock support registered Oct 2 19:09:03.922699 kernel: Registered efivars operations Oct 2 19:09:03.922706 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:09:03.922781 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:09:03.922798 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Oct 2 19:09:03.922806 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Oct 2 19:09:03.922822 kernel: e820: reserve RAM buffer [mem 0x9b1aa018-0x9bffffff] Oct 2 19:09:03.922830 kernel: e820: reserve RAM buffer [mem 0x9b3f7018-0x9bffffff] Oct 2 19:09:03.922837 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Oct 2 19:09:03.922843 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Oct 2 19:09:03.922850 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Oct 2 19:09:03.922857 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Oct 2 19:09:03.922864 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:09:03.922883 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:09:03.922904 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:09:03.922920 kernel: pnp: PnP ACPI init Oct 2 19:09:03.923174 kernel: pnp 00:02: [dma 2] Oct 2 19:09:03.923187 kernel: pnp: PnP ACPI: found 6 devices Oct 2 19:09:03.923194 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:09:03.923201 kernel: NET: Registered PF_INET protocol family Oct 2 19:09:03.923208 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:09:03.923215 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:09:03.923233 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:09:03.923244 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:09:03.923251 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:09:03.923258 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:09:03.923264 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:09:03.923271 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:09:03.923278 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:09:03.923285 kernel: NET: Registered PF_XDP protocol family Oct 2 19:09:03.923439 kernel: pci 0000:00:05.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Oct 2 19:09:03.923584 kernel: pci 0000:00:05.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Oct 2 19:09:03.923653 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:09:03.923717 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:09:03.923781 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:09:03.923844 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Oct 2 19:09:03.923907 kernel: pci_bus 0000:00: resource 8 [mem 0x800000000-0x87fffffff window] Oct 2 19:09:03.923979 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 19:09:03.924059 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:09:03.924153 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:09:03.924163 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:09:03.924171 kernel: Initialise system trusted keyrings Oct 2 19:09:03.924178 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:09:03.924185 kernel: Key type asymmetric registered Oct 2 19:09:03.924192 kernel: Asymmetric key parser 'x509' registered Oct 2 19:09:03.924199 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:09:03.924206 kernel: io scheduler mq-deadline registered Oct 2 19:09:03.924216 kernel: io scheduler kyber registered Oct 2 19:09:03.924223 kernel: io scheduler bfq registered Oct 2 19:09:03.924230 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:09:03.924245 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 19:09:03.924255 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Oct 2 19:09:03.924262 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 19:09:03.924272 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:09:03.924285 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:09:03.924294 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:09:03.924304 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:09:03.924313 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:09:03.924321 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:09:03.924412 kernel: rtc_cmos 00:05: RTC can wake from S4 Oct 2 19:09:03.924486 kernel: rtc_cmos 00:05: registered as rtc0 Oct 2 19:09:03.924618 kernel: rtc_cmos 00:05: setting system clock to 2023-10-02T19:09:03 UTC (1696273743) Oct 2 19:09:03.924701 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Oct 2 19:09:03.924711 kernel: efifb: probing for efifb Oct 2 19:09:03.924719 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Oct 2 19:09:03.924726 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Oct 2 19:09:03.924733 kernel: efifb: scrolling: redraw Oct 2 19:09:03.924740 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 19:09:03.924748 kernel: Console: switching to colour frame buffer device 160x50 Oct 2 19:09:03.924755 kernel: fb0: EFI VGA frame buffer device Oct 2 19:09:03.924765 kernel: pstore: Registered efi as persistent store backend Oct 2 19:09:03.924772 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:09:03.924779 kernel: Segment Routing with IPv6 Oct 2 19:09:03.924786 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:09:03.924794 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:09:03.924801 kernel: Key type dns_resolver registered Oct 2 19:09:03.924808 kernel: IPI shorthand broadcast: enabled Oct 2 19:09:03.924815 kernel: sched_clock: Marking stable (505091764, 88706209)->(639532681, -45734708) Oct 2 19:09:03.924822 kernel: registered taskstats version 1 Oct 2 19:09:03.924831 kernel: Loading compiled-in X.509 certificates Oct 2 19:09:03.924839 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:09:03.924847 kernel: Key type .fscrypt registered Oct 2 19:09:03.924853 kernel: Key type fscrypt-provisioning registered Oct 2 19:09:03.924861 kernel: pstore: Using crash dump compression: deflate Oct 2 19:09:03.924868 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:09:03.924875 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:09:03.924883 kernel: ima: No architecture policies found Oct 2 19:09:03.924891 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:09:03.924901 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:09:03.924911 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:09:03.924919 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:09:03.924927 kernel: Run /init as init process Oct 2 19:09:03.924934 kernel: with arguments: Oct 2 19:09:03.924941 kernel: /init Oct 2 19:09:03.924948 kernel: with environment: Oct 2 19:09:03.924955 kernel: HOME=/ Oct 2 19:09:03.924962 kernel: TERM=linux Oct 2 19:09:03.924970 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:09:03.924979 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:09:03.924988 systemd[1]: Detected virtualization kvm. Oct 2 19:09:03.924996 systemd[1]: Detected architecture x86-64. Oct 2 19:09:03.925003 systemd[1]: Running in initrd. Oct 2 19:09:03.925011 systemd[1]: No hostname configured, using default hostname. Oct 2 19:09:03.925018 systemd[1]: Hostname set to . Oct 2 19:09:03.925027 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:09:03.925035 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:09:03.925042 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:09:03.925050 systemd[1]: Reached target cryptsetup.target. Oct 2 19:09:03.925058 systemd[1]: Reached target paths.target. Oct 2 19:09:03.925065 systemd[1]: Reached target slices.target. Oct 2 19:09:03.925072 systemd[1]: Reached target swap.target. Oct 2 19:09:03.925080 systemd[1]: Reached target timers.target. Oct 2 19:09:03.925089 systemd[1]: Listening on iscsid.socket. Oct 2 19:09:03.925097 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:09:03.925105 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:09:03.925112 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:09:03.925120 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:09:03.925127 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:09:03.925135 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:09:03.925143 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:09:03.925150 systemd[1]: Reached target sockets.target. Oct 2 19:09:03.925159 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:09:03.925166 systemd[1]: Finished network-cleanup.service. Oct 2 19:09:03.925174 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:09:03.925182 systemd[1]: Starting systemd-journald.service... Oct 2 19:09:03.925189 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:09:03.925197 systemd[1]: Starting systemd-resolved.service... Oct 2 19:09:03.925204 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:09:03.925212 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:09:03.925220 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:09:03.925229 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:09:03.925236 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:09:03.925252 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:09:03.925268 systemd-journald[196]: Journal started Oct 2 19:09:03.925331 systemd-journald[196]: Runtime Journal (/run/log/journal/31b7c9fd50fe4c548e5b56e1d092339b) is 6.0M, max 48.4M, 42.4M free. Oct 2 19:09:03.911872 systemd-modules-load[197]: Inserted module 'overlay' Oct 2 19:09:03.928018 systemd[1]: Started systemd-journald.service. Oct 2 19:09:03.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:03.929055 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:09:03.934372 kernel: audit: type=1130 audit(1696273743.928:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:03.934413 kernel: audit: type=1130 audit(1696273743.931:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:03.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:03.931396 systemd-resolved[198]: Positive Trust Anchors: Oct 2 19:09:03.931416 systemd-resolved[198]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:09:03.931459 systemd-resolved[198]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:09:03.934864 systemd-resolved[198]: Defaulting to hostname 'linux'. Oct 2 19:09:03.936175 systemd[1]: Started systemd-resolved.service. Oct 2 19:09:03.936418 systemd[1]: Reached target nss-lookup.target. Oct 2 19:09:03.944582 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:09:03.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:03.947575 kernel: audit: type=1130 audit(1696273743.935:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:03.947600 kernel: Bridge firewalling registered Oct 2 19:09:03.947802 systemd-modules-load[197]: Inserted module 'br_netfilter' Oct 2 19:09:03.949099 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:09:03.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:03.951045 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:09:03.953786 kernel: audit: type=1130 audit(1696273743.948:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:03.960579 dracut-cmdline[215]: dracut-dracut-053 Oct 2 19:09:03.962608 dracut-cmdline[215]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:09:03.966569 kernel: SCSI subsystem initialized Oct 2 19:09:03.979155 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:09:03.979223 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:09:03.979234 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:09:03.982227 systemd-modules-load[197]: Inserted module 'dm_multipath' Oct 2 19:09:03.983111 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:09:03.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:03.984960 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:09:03.987188 kernel: audit: type=1130 audit(1696273743.983:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:03.992257 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:09:03.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:03.995575 kernel: audit: type=1130 audit(1696273743.992:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:04.020590 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:09:04.030591 kernel: iscsi: registered transport (tcp) Oct 2 19:09:04.048869 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:09:04.048929 kernel: QLogic iSCSI HBA Driver Oct 2 19:09:04.078746 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:09:04.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:04.080049 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:09:04.082588 kernel: audit: type=1130 audit(1696273744.078:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:04.126582 kernel: raid6: avx2x4 gen() 29414 MB/s Oct 2 19:09:04.143593 kernel: raid6: avx2x4 xor() 7154 MB/s Oct 2 19:09:04.160578 kernel: raid6: avx2x2 gen() 30728 MB/s Oct 2 19:09:04.177576 kernel: raid6: avx2x2 xor() 18338 MB/s Oct 2 19:09:04.194583 kernel: raid6: avx2x1 gen() 23219 MB/s Oct 2 19:09:04.211594 kernel: raid6: avx2x1 xor() 15213 MB/s Oct 2 19:09:04.228584 kernel: raid6: sse2x4 gen() 14818 MB/s Oct 2 19:09:04.245580 kernel: raid6: sse2x4 xor() 7191 MB/s Oct 2 19:09:04.262588 kernel: raid6: sse2x2 gen() 16015 MB/s Oct 2 19:09:04.279589 kernel: raid6: sse2x2 xor() 9687 MB/s Oct 2 19:09:04.296599 kernel: raid6: sse2x1 gen() 11588 MB/s Oct 2 19:09:04.313934 kernel: raid6: sse2x1 xor() 7694 MB/s Oct 2 19:09:04.314005 kernel: raid6: using algorithm avx2x2 gen() 30728 MB/s Oct 2 19:09:04.314015 kernel: raid6: .... xor() 18338 MB/s, rmw enabled Oct 2 19:09:04.314024 kernel: raid6: using avx2x2 recovery algorithm Oct 2 19:09:04.325585 kernel: xor: automatically using best checksumming function avx Oct 2 19:09:04.425616 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:09:04.438217 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:09:04.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:04.440000 audit: BPF prog-id=7 op=LOAD Oct 2 19:09:04.441822 kernel: audit: type=1130 audit(1696273744.438:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:04.441852 kernel: audit: type=1334 audit(1696273744.440:10): prog-id=7 op=LOAD Oct 2 19:09:04.441000 audit: BPF prog-id=8 op=LOAD Oct 2 19:09:04.442407 systemd[1]: Starting systemd-udevd.service... Oct 2 19:09:04.459813 systemd-udevd[400]: Using default interface naming scheme 'v252'. Oct 2 19:09:04.464355 systemd[1]: Started systemd-udevd.service. Oct 2 19:09:04.465531 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:09:04.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:04.476726 dracut-pre-trigger[405]: rd.md=0: removing MD RAID activation Oct 2 19:09:04.503920 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:09:04.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:04.505851 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:09:04.544892 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:09:04.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:04.579733 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:09:04.579936 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:09:04.583567 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:09:04.588599 kernel: libata version 3.00 loaded. Oct 2 19:09:04.591569 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 19:09:04.591786 kernel: scsi host0: ata_piix Oct 2 19:09:04.593174 kernel: scsi host1: ata_piix Oct 2 19:09:04.593319 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Oct 2 19:09:04.596754 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Oct 2 19:09:04.599840 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:09:04.599866 kernel: AES CTR mode by8 optimization enabled Oct 2 19:09:04.611917 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:09:04.615565 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (464) Oct 2 19:09:04.620635 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:09:04.622590 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:09:04.628833 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:09:04.632825 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:09:04.634503 systemd[1]: Starting disk-uuid.service... Oct 2 19:09:04.641578 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:09:04.645575 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:09:04.754597 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Oct 2 19:09:04.754676 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Oct 2 19:09:04.783597 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Oct 2 19:09:04.783799 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:09:04.800572 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Oct 2 19:09:05.648593 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:09:05.648978 disk-uuid[523]: The operation has completed successfully. Oct 2 19:09:05.676042 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:09:05.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:05.676000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:05.676141 systemd[1]: Finished disk-uuid.service. Oct 2 19:09:05.685201 systemd[1]: Starting verity-setup.service... Oct 2 19:09:05.700580 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:09:05.734469 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:09:05.737158 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:09:05.739767 systemd[1]: Finished verity-setup.service. Oct 2 19:09:05.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:05.808232 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:09:05.809355 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:09:05.808658 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:09:05.809352 systemd[1]: Starting ignition-setup.service... Oct 2 19:09:05.810271 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:09:05.820940 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:09:05.820998 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:09:05.821013 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:09:05.828972 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:09:05.837138 systemd[1]: Finished ignition-setup.service. Oct 2 19:09:05.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:05.838491 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:09:05.878205 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:09:05.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:05.879000 audit: BPF prog-id=9 op=LOAD Oct 2 19:09:05.880307 systemd[1]: Starting systemd-networkd.service... Oct 2 19:09:05.902050 systemd-networkd[697]: lo: Link UP Oct 2 19:09:05.902059 systemd-networkd[697]: lo: Gained carrier Oct 2 19:09:05.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:05.902545 systemd-networkd[697]: Enumeration completed Oct 2 19:09:05.902654 systemd[1]: Started systemd-networkd.service. Oct 2 19:09:05.902781 systemd-networkd[697]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:09:05.902991 systemd[1]: Reached target network.target. Oct 2 19:09:05.903714 systemd-networkd[697]: eth0: Link UP Oct 2 19:09:05.903718 systemd-networkd[697]: eth0: Gained carrier Oct 2 19:09:05.905412 systemd[1]: Starting iscsiuio.service... Oct 2 19:09:05.924750 systemd[1]: Started iscsiuio.service. Oct 2 19:09:05.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:05.926018 systemd[1]: Starting iscsid.service... Oct 2 19:09:05.927619 systemd-networkd[697]: eth0: DHCPv4 address 10.0.0.51/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:09:05.929952 iscsid[707]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:09:05.929952 iscsid[707]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:09:05.929952 iscsid[707]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:09:05.929952 iscsid[707]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:09:05.929952 iscsid[707]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:09:05.929952 iscsid[707]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:09:05.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:05.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:05.932573 systemd[1]: Started iscsid.service. Oct 2 19:09:05.935595 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:09:05.957251 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:09:05.957965 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:09:05.959112 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:09:05.960539 systemd[1]: Reached target remote-fs.target. Oct 2 19:09:05.962073 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:09:05.969722 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:09:05.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:05.994212 ignition[631]: Ignition 2.14.0 Oct 2 19:09:05.994220 ignition[631]: Stage: fetch-offline Oct 2 19:09:05.994277 ignition[631]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:09:05.994286 ignition[631]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:09:05.994407 ignition[631]: parsed url from cmdline: "" Oct 2 19:09:05.994412 ignition[631]: no config URL provided Oct 2 19:09:05.994418 ignition[631]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:09:05.994791 ignition[631]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:09:05.994826 ignition[631]: op(1): [started] loading QEMU firmware config module Oct 2 19:09:05.994831 ignition[631]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:09:06.003415 ignition[631]: op(1): [finished] loading QEMU firmware config module Oct 2 19:09:06.014412 ignition[631]: parsing config with SHA512: fd33ba2c69a9335b7d63e057cbfa96571f63b93cc8b408d4afe185a5667641c6f4022740905f220b7c1de07c7bf9c5d4ddadc5adc247c7c534c5e7a6c7eb2d41 Oct 2 19:09:06.037026 unknown[631]: fetched base config from "system" Oct 2 19:09:06.037038 unknown[631]: fetched user config from "qemu" Oct 2 19:09:06.037445 ignition[631]: fetch-offline: fetch-offline passed Oct 2 19:09:06.038724 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:09:06.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:06.037494 ignition[631]: Ignition finished successfully Oct 2 19:09:06.039870 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:09:06.040860 systemd[1]: Starting ignition-kargs.service... Oct 2 19:09:06.154437 ignition[723]: Ignition 2.14.0 Oct 2 19:09:06.154447 ignition[723]: Stage: kargs Oct 2 19:09:06.154587 ignition[723]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:09:06.154597 ignition[723]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:09:06.156112 ignition[723]: kargs: kargs passed Oct 2 19:09:06.156190 ignition[723]: Ignition finished successfully Oct 2 19:09:06.157884 systemd[1]: Finished ignition-kargs.service. Oct 2 19:09:06.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:06.159738 systemd[1]: Starting ignition-disks.service... Oct 2 19:09:06.170060 ignition[729]: Ignition 2.14.0 Oct 2 19:09:06.170071 ignition[729]: Stage: disks Oct 2 19:09:06.170192 ignition[729]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:09:06.170206 ignition[729]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:09:06.171514 ignition[729]: disks: disks passed Oct 2 19:09:06.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:06.172482 systemd[1]: Finished ignition-disks.service. Oct 2 19:09:06.171595 ignition[729]: Ignition finished successfully Oct 2 19:09:06.173648 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:09:06.174622 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:09:06.175248 systemd[1]: Reached target local-fs.target. Oct 2 19:09:06.175876 systemd[1]: Reached target sysinit.target. Oct 2 19:09:06.176975 systemd[1]: Reached target basic.target. Oct 2 19:09:06.178589 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:09:06.189168 systemd-fsck[737]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:09:06.193962 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:09:06.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:06.195111 systemd[1]: Mounting sysroot.mount... Oct 2 19:09:06.204575 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:09:06.204589 systemd[1]: Mounted sysroot.mount. Oct 2 19:09:06.204947 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:09:06.206782 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:09:06.208168 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:09:06.208223 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:09:06.208251 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:09:06.213576 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:09:06.214810 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:09:06.219682 initrd-setup-root[747]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:09:06.223665 initrd-setup-root[755]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:09:06.227041 initrd-setup-root[763]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:09:06.229751 initrd-setup-root[771]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:09:06.256192 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:09:06.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:06.257800 systemd[1]: Starting ignition-mount.service... Oct 2 19:09:06.259074 systemd[1]: Starting sysroot-boot.service... Oct 2 19:09:06.264211 bash[788]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:09:06.275832 ignition[790]: INFO : Ignition 2.14.0 Oct 2 19:09:06.276638 ignition[790]: INFO : Stage: mount Oct 2 19:09:06.276638 ignition[790]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:09:06.276638 ignition[790]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:09:06.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:06.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:06.276791 systemd[1]: Finished sysroot-boot.service. Oct 2 19:09:06.279950 ignition[790]: INFO : mount: mount passed Oct 2 19:09:06.279950 ignition[790]: INFO : Ignition finished successfully Oct 2 19:09:06.278388 systemd[1]: Finished ignition-mount.service. Oct 2 19:09:06.750162 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:09:06.756998 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (798) Oct 2 19:09:06.757026 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:09:06.757036 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:09:06.757595 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:09:06.761488 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:09:06.762682 systemd[1]: Starting ignition-files.service... Oct 2 19:09:06.777422 ignition[818]: INFO : Ignition 2.14.0 Oct 2 19:09:06.777422 ignition[818]: INFO : Stage: files Oct 2 19:09:06.778703 ignition[818]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:09:06.778703 ignition[818]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:09:06.781288 ignition[818]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:09:06.782956 ignition[818]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:09:06.782956 ignition[818]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:09:06.785231 ignition[818]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:09:06.786277 ignition[818]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:09:06.787216 ignition[818]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:09:06.787216 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:09:06.787216 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 19:09:06.786435 unknown[818]: wrote ssh authorized keys file for user: core Oct 2 19:09:06.975147 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:09:07.089520 ignition[818]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 19:09:07.089520 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:09:07.094408 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:09:07.094408 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:09:07.184525 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:09:07.200792 systemd-networkd[697]: eth0: Gained IPv6LL Oct 2 19:09:07.263545 ignition[818]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Oct 2 19:09:07.265534 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:09:07.265534 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:09:07.267797 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:09:07.361091 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:09:08.609764 ignition[818]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Oct 2 19:09:08.612521 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:09:08.612521 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:09:08.612521 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:09:08.681169 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:09:10.711318 ignition[818]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Oct 2 19:09:10.713799 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:09:10.713799 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:09:10.713799 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:09:10.713799 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:09:10.713799 ignition[818]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:09:10.713799 ignition[818]: INFO : files: op(9): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:09:10.713799 ignition[818]: INFO : files: op(9): op(a): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:09:10.713799 ignition[818]: INFO : files: op(9): op(a): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:09:10.713799 ignition[818]: INFO : files: op(9): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:09:10.713799 ignition[818]: INFO : files: op(b): [started] processing unit "prepare-critools.service" Oct 2 19:09:10.713799 ignition[818]: INFO : files: op(b): op(c): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:09:10.713799 ignition[818]: INFO : files: op(b): op(c): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:09:10.713799 ignition[818]: INFO : files: op(b): [finished] processing unit "prepare-critools.service" Oct 2 19:09:10.713799 ignition[818]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Oct 2 19:09:10.713799 ignition[818]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:09:10.713799 ignition[818]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:09:10.713799 ignition[818]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Oct 2 19:09:10.713799 ignition[818]: INFO : files: op(f): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:09:10.739520 ignition[818]: INFO : files: op(f): op(10): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:09:10.790522 ignition[818]: INFO : files: op(f): op(10): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:09:10.791912 ignition[818]: INFO : files: op(f): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:09:10.791912 ignition[818]: INFO : files: op(11): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:09:10.791912 ignition[818]: INFO : files: op(11): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:09:10.791912 ignition[818]: INFO : files: op(12): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:09:10.791912 ignition[818]: INFO : files: op(12): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:09:10.791912 ignition[818]: INFO : files: createResultFile: createFiles: op(13): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:09:10.791912 ignition[818]: INFO : files: createResultFile: createFiles: op(13): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:09:10.791912 ignition[818]: INFO : files: files passed Oct 2 19:09:10.791912 ignition[818]: INFO : Ignition finished successfully Oct 2 19:09:10.801850 systemd[1]: Finished ignition-files.service. Oct 2 19:09:10.805414 kernel: kauditd_printk_skb: 22 callbacks suppressed Oct 2 19:09:10.805445 kernel: audit: type=1130 audit(1696273750.801:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.805431 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:09:10.805815 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:09:10.806435 systemd[1]: Starting ignition-quench.service... Oct 2 19:09:10.809782 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:09:10.809890 systemd[1]: Finished ignition-quench.service. Oct 2 19:09:10.815063 kernel: audit: type=1130 audit(1696273750.810:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.815080 kernel: audit: type=1131 audit(1696273750.810:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.818288 initrd-setup-root-after-ignition[843]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:09:10.820986 initrd-setup-root-after-ignition[845]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:09:10.822463 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:09:10.825810 kernel: audit: type=1130 audit(1696273750.822:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.822924 systemd[1]: Reached target ignition-complete.target. Oct 2 19:09:10.826976 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:09:10.840613 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:09:10.840720 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:09:10.846447 kernel: audit: type=1130 audit(1696273750.840:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.846468 kernel: audit: type=1131 audit(1696273750.840:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.840000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.841187 systemd[1]: Reached target initrd-fs.target. Oct 2 19:09:10.846783 systemd[1]: Reached target initrd.target. Oct 2 19:09:10.847007 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:09:10.848009 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:09:10.859275 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:09:10.862298 kernel: audit: type=1130 audit(1696273750.858:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.862384 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:09:10.873221 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:09:10.873809 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:09:10.874701 systemd[1]: Stopped target timers.target. Oct 2 19:09:10.876333 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:09:10.876475 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:09:10.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.877658 systemd[1]: Stopped target initrd.target. Oct 2 19:09:10.880871 kernel: audit: type=1131 audit(1696273750.876:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.880342 systemd[1]: Stopped target basic.target. Oct 2 19:09:10.881312 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:09:10.881585 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:09:10.883676 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:09:10.886031 systemd[1]: Stopped target remote-fs.target. Oct 2 19:09:10.886365 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:09:10.887839 systemd[1]: Stopped target sysinit.target. Oct 2 19:09:10.889154 systemd[1]: Stopped target local-fs.target. Oct 2 19:09:10.890240 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:09:10.891243 systemd[1]: Stopped target swap.target. Oct 2 19:09:10.892195 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:09:10.892350 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:09:10.893000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.893971 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:09:10.897459 kernel: audit: type=1131 audit(1696273750.893:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.896437 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:09:10.900562 kernel: audit: type=1131 audit(1696273750.897:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.897000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.896572 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:09:10.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.897982 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:09:10.898110 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:09:10.901023 systemd[1]: Stopped target paths.target. Oct 2 19:09:10.901820 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:09:10.905605 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:09:10.905953 systemd[1]: Stopped target slices.target. Oct 2 19:09:10.907040 systemd[1]: Stopped target sockets.target. Oct 2 19:09:10.907946 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:09:10.908036 systemd[1]: Closed iscsid.socket. Oct 2 19:09:10.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.908919 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:09:10.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.909039 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:09:10.909947 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:09:10.910060 systemd[1]: Stopped ignition-files.service. Oct 2 19:09:10.911977 systemd[1]: Stopping ignition-mount.service... Oct 2 19:09:10.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.912927 systemd[1]: Stopping iscsiuio.service... Oct 2 19:09:10.913967 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:09:10.914107 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:09:10.916171 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:09:10.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.918000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.916810 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:09:10.916934 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:09:10.918193 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:09:10.918312 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:09:10.922451 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:09:10.922622 systemd[1]: Stopped iscsiuio.service. Oct 2 19:09:10.924190 ignition[858]: INFO : Ignition 2.14.0 Oct 2 19:09:10.924190 ignition[858]: INFO : Stage: umount Oct 2 19:09:10.924190 ignition[858]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:09:10.924190 ignition[858]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:09:10.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.927971 ignition[858]: INFO : umount: umount passed Oct 2 19:09:10.927971 ignition[858]: INFO : Ignition finished successfully Oct 2 19:09:10.925212 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:09:10.925321 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:09:10.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.926239 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:09:10.926332 systemd[1]: Stopped ignition-mount.service. Oct 2 19:09:10.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.927955 systemd[1]: Stopped target network.target. Oct 2 19:09:10.929026 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:09:10.929062 systemd[1]: Closed iscsiuio.socket. Oct 2 19:09:10.930281 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:09:10.930319 systemd[1]: Stopped ignition-disks.service. Oct 2 19:09:10.937000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.938000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.931417 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:09:10.931449 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:09:10.932422 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:09:10.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.932459 systemd[1]: Stopped ignition-setup.service. Oct 2 19:09:10.933768 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:09:10.934839 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:09:10.936626 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:09:10.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.937000 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:09:10.937066 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:09:10.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.937868 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:09:10.937909 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:09:10.938597 systemd-networkd[697]: eth0: DHCPv6 lease lost Oct 2 19:09:10.949000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:09:10.939831 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:09:10.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.939942 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:09:10.940907 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:09:10.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.940944 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:09:10.943006 systemd[1]: Stopping network-cleanup.service... Oct 2 19:09:10.954000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:09:10.943876 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:09:10.943928 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:09:10.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.945099 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:09:10.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.945144 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:09:10.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.946313 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:09:10.946353 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:09:10.947739 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:09:10.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.949679 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:09:10.950176 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:09:10.950290 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:09:10.951990 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:09:10.952124 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:09:10.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:10.953727 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:09:10.953774 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:09:10.954804 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:09:10.954862 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:09:10.956004 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:09:10.956041 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:09:10.957313 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:09:10.957357 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:09:10.958390 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:09:10.958436 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:09:10.960219 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:09:10.961204 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:09:10.961245 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:09:10.962601 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:09:10.962676 systemd[1]: Stopped network-cleanup.service. Oct 2 19:09:10.965423 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:09:10.965491 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:09:10.966760 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:09:10.968538 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:09:10.983950 systemd[1]: Switching root. Oct 2 19:09:11.001105 iscsid[707]: iscsid shutting down. Oct 2 19:09:11.001604 systemd-journald[196]: Received SIGTERM from PID 1 (systemd). Oct 2 19:09:11.001633 systemd-journald[196]: Journal stopped Oct 2 19:09:14.437739 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:09:14.437801 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:09:14.437819 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:09:14.437833 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:09:14.437845 kernel: SELinux: policy capability open_perms=1 Oct 2 19:09:14.437858 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:09:14.437871 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:09:14.437888 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:09:14.437902 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:09:14.437914 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:09:14.437932 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:09:14.437950 systemd[1]: Successfully loaded SELinux policy in 42.719ms. Oct 2 19:09:14.437977 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 13.171ms. Oct 2 19:09:14.437992 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:09:14.438006 systemd[1]: Detected virtualization kvm. Oct 2 19:09:14.438020 systemd[1]: Detected architecture x86-64. Oct 2 19:09:14.438041 systemd[1]: Detected first boot. Oct 2 19:09:14.438055 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:09:14.438071 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:09:14.438085 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:09:14.438100 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:09:14.438121 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:09:14.438135 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:09:14.438151 systemd[1]: Stopped iscsid.service. Oct 2 19:09:14.438173 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:09:14.438188 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:09:14.438202 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:09:14.438216 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:09:14.438230 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:09:14.438244 systemd[1]: Created slice system-getty.slice. Oct 2 19:09:14.438257 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:09:14.438272 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:09:14.438291 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:09:14.438304 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:09:14.438318 systemd[1]: Created slice user.slice. Oct 2 19:09:14.438331 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:09:14.438344 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:09:14.438361 systemd[1]: Set up automount boot.automount. Oct 2 19:09:14.438375 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:09:14.438388 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:09:14.438402 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:09:14.438417 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:09:14.438431 systemd[1]: Reached target integritysetup.target. Oct 2 19:09:14.438445 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:09:14.438458 systemd[1]: Reached target remote-fs.target. Oct 2 19:09:14.438473 systemd[1]: Reached target slices.target. Oct 2 19:09:14.438486 systemd[1]: Reached target swap.target. Oct 2 19:09:14.438500 systemd[1]: Reached target torcx.target. Oct 2 19:09:14.438513 systemd[1]: Reached target veritysetup.target. Oct 2 19:09:14.438567 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:09:14.438584 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:09:14.438598 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:09:14.438612 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:09:14.438626 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:09:14.438640 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:09:14.438655 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:09:14.438670 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:09:14.438684 systemd[1]: Mounting media.mount... Oct 2 19:09:14.438714 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:09:14.438728 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:09:14.438741 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:09:14.438754 systemd[1]: Mounting tmp.mount... Oct 2 19:09:14.438768 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:09:14.438784 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:09:14.438794 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:09:14.438804 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:09:14.438814 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:09:14.438832 systemd[1]: Starting modprobe@drm.service... Oct 2 19:09:14.438844 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:09:14.438867 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:09:14.438882 systemd[1]: Starting modprobe@loop.service... Oct 2 19:09:14.438897 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:09:14.438911 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:09:14.438922 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:09:14.438932 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:09:14.438941 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:09:14.438962 systemd[1]: Stopped systemd-journald.service. Oct 2 19:09:14.438972 kernel: loop: module loaded Oct 2 19:09:14.438982 systemd[1]: Starting systemd-journald.service... Oct 2 19:09:14.438994 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:09:14.439004 kernel: fuse: init (API version 7.34) Oct 2 19:09:14.439014 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:09:14.439035 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:09:14.439046 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:09:14.439057 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:09:14.439074 systemd[1]: Stopped verity-setup.service. Oct 2 19:09:14.439084 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:09:14.439094 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:09:14.439104 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:09:14.439114 systemd[1]: Mounted media.mount. Oct 2 19:09:14.439125 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:09:14.439150 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:09:14.439177 systemd[1]: Mounted tmp.mount. Oct 2 19:09:14.439190 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:09:14.439200 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:09:14.439220 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:09:14.439230 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:09:14.439246 systemd-journald[960]: Journal started Oct 2 19:09:14.439296 systemd-journald[960]: Runtime Journal (/run/log/journal/31b7c9fd50fe4c548e5b56e1d092339b) is 6.0M, max 48.4M, 42.4M free. Oct 2 19:09:11.081000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:09:11.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:09:11.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:09:11.471000 audit: BPF prog-id=10 op=LOAD Oct 2 19:09:11.471000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:09:11.471000 audit: BPF prog-id=11 op=LOAD Oct 2 19:09:11.471000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:09:14.319000 audit: BPF prog-id=12 op=LOAD Oct 2 19:09:14.319000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:09:14.320000 audit: BPF prog-id=13 op=LOAD Oct 2 19:09:14.320000 audit: BPF prog-id=14 op=LOAD Oct 2 19:09:14.320000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:09:14.320000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:09:14.321000 audit: BPF prog-id=15 op=LOAD Oct 2 19:09:14.321000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:09:14.321000 audit: BPF prog-id=16 op=LOAD Oct 2 19:09:14.321000 audit: BPF prog-id=17 op=LOAD Oct 2 19:09:14.321000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:09:14.321000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:09:14.322000 audit: BPF prog-id=18 op=LOAD Oct 2 19:09:14.322000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:09:14.322000 audit: BPF prog-id=19 op=LOAD Oct 2 19:09:14.322000 audit: BPF prog-id=20 op=LOAD Oct 2 19:09:14.322000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:09:14.322000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:09:14.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.325000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.334000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:09:14.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.406000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.407000 audit: BPF prog-id=21 op=LOAD Oct 2 19:09:14.407000 audit: BPF prog-id=22 op=LOAD Oct 2 19:09:14.407000 audit: BPF prog-id=23 op=LOAD Oct 2 19:09:14.407000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:09:14.407000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:09:14.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.435000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:09:14.435000 audit[960]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffed08c8390 a2=4000 a3=7ffed08c842c items=0 ppid=1 pid=960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:14.435000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:09:14.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:11.538614 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:09:14.318848 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:09:11.539027 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:09:14.318859 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:09:11.539043 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:09:14.323683 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:09:11.539076 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:09:11.539085 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:09:11.539114 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:09:11.539125 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:09:11.539344 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:09:11.539379 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:09:14.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.441615 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:09:14.441632 systemd[1]: Started systemd-journald.service. Oct 2 19:09:11.539391 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:09:11.539766 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:09:11.539796 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:09:11.539812 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:09:11.539825 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:09:11.539839 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:09:11.539852 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:11Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:09:14.001736 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:14Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:09:14.002073 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:14Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:09:14.002212 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:14Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:09:14.002381 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:14Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:09:14.002427 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:14Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:09:14.002493 /usr/lib/systemd/system-generators/torcx-generator[891]: time="2023-10-02T19:09:14Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:09:14.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.443310 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:09:14.443670 systemd[1]: Finished modprobe@drm.service. Oct 2 19:09:14.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.444494 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:09:14.444767 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:09:14.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.445777 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:09:14.445890 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:09:14.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.445000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.446676 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:09:14.448464 systemd[1]: Finished modprobe@loop.service. Oct 2 19:09:14.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.449622 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:09:14.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.450526 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:09:14.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.451494 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:09:14.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.452580 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:09:14.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.453724 systemd[1]: Reached target network-pre.target. Oct 2 19:09:14.455380 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:09:14.457358 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:09:14.458323 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:09:14.459951 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:09:14.461662 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:09:14.462404 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:09:14.463439 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:09:14.464350 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:09:14.467169 systemd-journald[960]: Time spent on flushing to /var/log/journal/31b7c9fd50fe4c548e5b56e1d092339b is 17.614ms for 1150 entries. Oct 2 19:09:14.467169 systemd-journald[960]: System Journal (/var/log/journal/31b7c9fd50fe4c548e5b56e1d092339b) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:09:14.517846 systemd-journald[960]: Received client request to flush runtime journal. Oct 2 19:09:14.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.465405 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:09:14.467716 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:09:14.471837 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:09:14.472722 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:09:14.518647 udevadm[995]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:09:14.475380 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:09:14.476134 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:09:14.480531 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:09:14.482416 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:09:14.499860 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:09:14.500932 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:09:14.518750 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:09:14.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.988424 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:09:14.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.989000 audit: BPF prog-id=24 op=LOAD Oct 2 19:09:14.989000 audit: BPF prog-id=25 op=LOAD Oct 2 19:09:14.989000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:09:14.989000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:09:14.990717 systemd[1]: Starting systemd-udevd.service... Oct 2 19:09:15.007065 systemd-udevd[997]: Using default interface naming scheme 'v252'. Oct 2 19:09:15.021209 systemd[1]: Started systemd-udevd.service. Oct 2 19:09:15.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:15.022000 audit: BPF prog-id=26 op=LOAD Oct 2 19:09:15.024774 systemd[1]: Starting systemd-networkd.service... Oct 2 19:09:15.029000 audit: BPF prog-id=27 op=LOAD Oct 2 19:09:15.029000 audit: BPF prog-id=28 op=LOAD Oct 2 19:09:15.029000 audit: BPF prog-id=29 op=LOAD Oct 2 19:09:15.030788 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:09:15.059825 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:09:15.060463 systemd[1]: Started systemd-userdbd.service. Oct 2 19:09:15.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:15.082516 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:09:15.093572 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:09:15.099574 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:09:15.114000 audit[1009]: AVC avc: denied { confidentiality } for pid=1009 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:09:15.119278 systemd-networkd[1004]: lo: Link UP Oct 2 19:09:15.119287 systemd-networkd[1004]: lo: Gained carrier Oct 2 19:09:15.119765 systemd-networkd[1004]: Enumeration completed Oct 2 19:09:15.119881 systemd-networkd[1004]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:09:15.119895 systemd[1]: Started systemd-networkd.service. Oct 2 19:09:15.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:15.120972 systemd-networkd[1004]: eth0: Link UP Oct 2 19:09:15.120983 systemd-networkd[1004]: eth0: Gained carrier Oct 2 19:09:15.133734 systemd-networkd[1004]: eth0: DHCPv4 address 10.0.0.51/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:09:15.114000 audit[1009]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55a9e7ee7400 a1=32194 a2=7fa79c088bc5 a3=5 items=106 ppid=997 pid=1009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:15.114000 audit: CWD cwd="/" Oct 2 19:09:15.114000 audit: PATH item=0 name=(null) inode=14584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=1 name=(null) inode=14585 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=2 name=(null) inode=14584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=3 name=(null) inode=14586 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=4 name=(null) inode=14584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=5 name=(null) inode=14587 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=6 name=(null) inode=14587 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=7 name=(null) inode=14588 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=8 name=(null) inode=14587 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=9 name=(null) inode=14589 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=10 name=(null) inode=14587 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=11 name=(null) inode=14590 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=12 name=(null) inode=14587 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=13 name=(null) inode=14591 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=14 name=(null) inode=14587 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=15 name=(null) inode=14592 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=16 name=(null) inode=14584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=17 name=(null) inode=14593 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=18 name=(null) inode=14593 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=19 name=(null) inode=14594 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=20 name=(null) inode=14593 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=21 name=(null) inode=14595 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=22 name=(null) inode=14593 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=23 name=(null) inode=14596 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=24 name=(null) inode=14593 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=25 name=(null) inode=14597 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=26 name=(null) inode=14593 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=27 name=(null) inode=14598 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=28 name=(null) inode=14584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=29 name=(null) inode=14599 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=30 name=(null) inode=14599 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=31 name=(null) inode=14600 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=32 name=(null) inode=14599 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=33 name=(null) inode=14601 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=34 name=(null) inode=14599 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=35 name=(null) inode=14602 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=36 name=(null) inode=14599 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=37 name=(null) inode=14603 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=38 name=(null) inode=14599 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=39 name=(null) inode=14604 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=40 name=(null) inode=14584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=41 name=(null) inode=14605 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=42 name=(null) inode=14605 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=43 name=(null) inode=14606 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=44 name=(null) inode=14605 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=45 name=(null) inode=14607 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=46 name=(null) inode=14605 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=47 name=(null) inode=14608 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=48 name=(null) inode=14605 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=49 name=(null) inode=14609 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=50 name=(null) inode=14605 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=51 name=(null) inode=14610 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=52 name=(null) inode=51 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=53 name=(null) inode=14611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=54 name=(null) inode=14611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=55 name=(null) inode=14612 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=56 name=(null) inode=14611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=57 name=(null) inode=14613 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=58 name=(null) inode=14611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=59 name=(null) inode=14614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=60 name=(null) inode=14614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=61 name=(null) inode=14615 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=62 name=(null) inode=14614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=63 name=(null) inode=14616 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=64 name=(null) inode=14614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=65 name=(null) inode=14617 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=66 name=(null) inode=14614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=67 name=(null) inode=14618 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=68 name=(null) inode=14614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=69 name=(null) inode=14619 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=70 name=(null) inode=14611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=71 name=(null) inode=14620 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=72 name=(null) inode=14620 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=73 name=(null) inode=14621 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=74 name=(null) inode=14620 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=75 name=(null) inode=14622 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=76 name=(null) inode=14620 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=77 name=(null) inode=14623 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=78 name=(null) inode=14620 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=79 name=(null) inode=14624 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=80 name=(null) inode=14620 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=81 name=(null) inode=14625 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=82 name=(null) inode=14611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=83 name=(null) inode=14626 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=84 name=(null) inode=14626 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=85 name=(null) inode=14627 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=86 name=(null) inode=14626 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=87 name=(null) inode=14628 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=88 name=(null) inode=14626 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=89 name=(null) inode=14629 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=90 name=(null) inode=14626 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=91 name=(null) inode=14630 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=92 name=(null) inode=14626 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=93 name=(null) inode=14631 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=94 name=(null) inode=14611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=95 name=(null) inode=14632 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=96 name=(null) inode=14632 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=97 name=(null) inode=14633 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=98 name=(null) inode=14632 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=99 name=(null) inode=14634 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=100 name=(null) inode=14632 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=101 name=(null) inode=14635 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=102 name=(null) inode=14632 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=103 name=(null) inode=14636 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=104 name=(null) inode=14632 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PATH item=105 name=(null) inode=14637 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:09:15.114000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:09:15.142575 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 0 Oct 2 19:09:15.147564 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Oct 2 19:09:15.153584 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:09:15.217610 kernel: kvm: Nested Virtualization enabled Oct 2 19:09:15.217713 kernel: SVM: kvm: Nested Paging enabled Oct 2 19:09:15.234626 kernel: EDAC MC: Ver: 3.0.0 Oct 2 19:09:15.255093 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:09:15.255000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:15.257186 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:09:15.273115 lvm[1033]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:09:15.300521 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:09:15.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:15.301344 systemd[1]: Reached target cryptsetup.target. Oct 2 19:09:15.303056 systemd[1]: Starting lvm2-activation.service... Oct 2 19:09:15.307260 lvm[1034]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:09:15.334405 systemd[1]: Finished lvm2-activation.service. Oct 2 19:09:15.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:15.335271 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:09:15.335865 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:09:15.335896 systemd[1]: Reached target local-fs.target. Oct 2 19:09:15.336409 systemd[1]: Reached target machines.target. Oct 2 19:09:15.338119 systemd[1]: Starting ldconfig.service... Oct 2 19:09:15.338882 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:09:15.338944 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:09:15.339766 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:09:15.341246 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:09:15.342869 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:09:15.343545 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:09:15.343632 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:09:15.344458 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:09:15.347331 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1036 (bootctl) Oct 2 19:09:15.348315 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:09:15.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:15.355128 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:09:15.364466 systemd-tmpfiles[1039]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:09:15.370953 systemd-tmpfiles[1039]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:09:15.376901 systemd-tmpfiles[1039]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:09:15.554851 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:09:15.556022 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:09:15.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:15.571879 systemd-fsck[1045]: fsck.fat 4.2 (2021-01-31) Oct 2 19:09:15.571879 systemd-fsck[1045]: /dev/vda1: 790 files, 115092/258078 clusters Oct 2 19:09:15.574067 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:09:15.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:15.577699 systemd[1]: Mounting boot.mount... Oct 2 19:09:15.585720 systemd[1]: Mounted boot.mount. Oct 2 19:09:15.596531 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:09:15.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:15.646826 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:09:15.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:15.648751 systemd[1]: Starting audit-rules.service... Oct 2 19:09:15.650202 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:09:15.652000 audit: BPF prog-id=30 op=LOAD Oct 2 19:09:15.651829 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:09:15.660304 systemd[1]: Starting systemd-resolved.service... Oct 2 19:09:15.708456 augenrules[1067]: No rules Oct 2 19:09:15.707000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:09:15.707000 audit[1067]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdb97d7860 a2=420 a3=0 items=0 ppid=1049 pid=1067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:15.707000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:09:15.825921 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:09:15.827698 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:09:15.829512 systemd[1]: Finished audit-rules.service. Oct 2 19:09:15.830468 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:09:15.831527 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:09:15.838909 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:09:15.846025 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:09:15.854901 ldconfig[1035]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:09:15.860577 systemd[1]: Finished ldconfig.service. Oct 2 19:09:15.862642 systemd[1]: Starting systemd-update-done.service... Oct 2 19:09:15.869310 systemd[1]: Finished systemd-update-done.service. Oct 2 19:09:15.880110 systemd-resolved[1053]: Positive Trust Anchors: Oct 2 19:09:15.880122 systemd-resolved[1053]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:09:15.880154 systemd-resolved[1053]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:09:15.885772 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:09:15.886991 systemd[1]: Reached target time-set.target. Oct 2 19:09:15.887016 systemd-timesyncd[1072]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:09:15.887059 systemd-timesyncd[1072]: Initial clock synchronization to Mon 2023-10-02 19:09:15.647608 UTC. Oct 2 19:09:15.895914 systemd-resolved[1053]: Defaulting to hostname 'linux'. Oct 2 19:09:15.897750 systemd[1]: Started systemd-resolved.service. Oct 2 19:09:15.898582 systemd[1]: Reached target network.target. Oct 2 19:09:15.899153 systemd[1]: Reached target nss-lookup.target. Oct 2 19:09:15.899721 systemd[1]: Reached target sysinit.target. Oct 2 19:09:15.900386 systemd[1]: Started motdgen.path. Oct 2 19:09:15.901020 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:09:15.902119 systemd[1]: Started logrotate.timer. Oct 2 19:09:15.902899 systemd[1]: Started mdadm.timer. Oct 2 19:09:15.903509 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:09:15.904258 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:09:15.904302 systemd[1]: Reached target paths.target. Oct 2 19:09:15.904961 systemd[1]: Reached target timers.target. Oct 2 19:09:15.906043 systemd[1]: Listening on dbus.socket. Oct 2 19:09:15.907935 systemd[1]: Starting docker.socket... Oct 2 19:09:15.911000 systemd[1]: Listening on sshd.socket. Oct 2 19:09:15.911782 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:09:15.912199 systemd[1]: Listening on docker.socket. Oct 2 19:09:15.912798 systemd[1]: Reached target sockets.target. Oct 2 19:09:15.913314 systemd[1]: Reached target basic.target. Oct 2 19:09:15.913869 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:09:15.913891 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:09:15.914876 systemd[1]: Starting containerd.service... Oct 2 19:09:15.916399 systemd[1]: Starting dbus.service... Oct 2 19:09:15.917827 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:09:15.919334 systemd[1]: Starting extend-filesystems.service... Oct 2 19:09:15.920034 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:09:15.921116 systemd[1]: Starting motdgen.service... Oct 2 19:09:15.922839 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:09:15.924603 systemd[1]: Starting prepare-critools.service... Oct 2 19:09:15.927039 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:09:15.928054 jq[1080]: false Oct 2 19:09:15.929874 systemd[1]: Starting sshd-keygen.service... Oct 2 19:09:15.934814 systemd[1]: Starting systemd-logind.service... Oct 2 19:09:15.935595 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:09:15.935669 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:09:15.936281 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:09:15.937034 systemd[1]: Starting update-engine.service... Oct 2 19:09:15.938454 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:09:15.941764 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:09:15.941929 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:09:15.943873 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:09:15.944037 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:09:16.012503 jq[1099]: true Oct 2 19:09:16.013084 extend-filesystems[1081]: Found sr0 Oct 2 19:09:16.014023 extend-filesystems[1081]: Found vda Oct 2 19:09:16.014533 extend-filesystems[1081]: Found vda1 Oct 2 19:09:16.015006 tar[1102]: crictl Oct 2 19:09:16.015634 extend-filesystems[1081]: Found vda2 Oct 2 19:09:16.016131 extend-filesystems[1081]: Found vda3 Oct 2 19:09:16.016638 extend-filesystems[1081]: Found usr Oct 2 19:09:16.016638 extend-filesystems[1081]: Found vda4 Oct 2 19:09:16.016638 extend-filesystems[1081]: Found vda6 Oct 2 19:09:16.018745 extend-filesystems[1081]: Found vda7 Oct 2 19:09:16.018745 extend-filesystems[1081]: Found vda9 Oct 2 19:09:16.018745 extend-filesystems[1081]: Checking size of /dev/vda9 Oct 2 19:09:16.016922 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:09:16.021020 jq[1107]: true Oct 2 19:09:16.017062 systemd[1]: Finished motdgen.service. Oct 2 19:09:16.023122 tar[1101]: ./ Oct 2 19:09:16.023122 tar[1101]: ./macvlan Oct 2 19:09:16.025609 dbus-daemon[1079]: [system] SELinux support is enabled Oct 2 19:09:16.025809 systemd[1]: Started dbus.service. Oct 2 19:09:16.028791 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:09:16.030074 extend-filesystems[1081]: Old size kept for /dev/vda9 Oct 2 19:09:16.029485 systemd[1]: Reached target system-config.target. Oct 2 19:09:16.030679 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:09:16.030701 systemd[1]: Reached target user-config.target. Oct 2 19:09:16.031873 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:09:16.032018 systemd[1]: Finished extend-filesystems.service. Oct 2 19:09:16.065984 systemd-logind[1095]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:09:16.066381 systemd-logind[1095]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:09:16.067947 systemd-logind[1095]: New seat seat0. Oct 2 19:09:16.073598 systemd[1]: Started systemd-logind.service. Oct 2 19:09:16.095733 tar[1101]: ./static Oct 2 19:09:16.098362 update_engine[1098]: I1002 19:09:16.097810 1098 main.cc:92] Flatcar Update Engine starting Oct 2 19:09:16.103085 systemd[1]: Started update-engine.service. Oct 2 19:09:16.103645 update_engine[1098]: I1002 19:09:16.103564 1098 update_check_scheduler.cc:74] Next update check in 5m7s Oct 2 19:09:16.106119 systemd[1]: Started locksmithd.service. Oct 2 19:09:16.108188 env[1104]: time="2023-10-02T19:09:16.106809723Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:09:16.115610 bash[1135]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:09:16.116395 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:09:16.128026 env[1104]: time="2023-10-02T19:09:16.127977619Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:09:16.128338 env[1104]: time="2023-10-02T19:09:16.128318952Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:09:16.129750 env[1104]: time="2023-10-02T19:09:16.129721041Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:09:16.129883 env[1104]: time="2023-10-02T19:09:16.129859732Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:09:16.130227 env[1104]: time="2023-10-02T19:09:16.130200783Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:09:16.130337 env[1104]: time="2023-10-02T19:09:16.130316032Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:09:16.130447 env[1104]: time="2023-10-02T19:09:16.130422328Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:09:16.130546 env[1104]: time="2023-10-02T19:09:16.130513523Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:09:16.130754 env[1104]: time="2023-10-02T19:09:16.130728624Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:09:16.130946 tar[1101]: ./vlan Oct 2 19:09:16.131279 env[1104]: time="2023-10-02T19:09:16.131257292Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:09:16.131507 env[1104]: time="2023-10-02T19:09:16.131486399Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:09:16.131614 env[1104]: time="2023-10-02T19:09:16.131595447Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:09:16.131728 env[1104]: time="2023-10-02T19:09:16.131709072Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:09:16.131802 env[1104]: time="2023-10-02T19:09:16.131783490Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.139662312Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.139711676Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.139724039Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.139786231Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.139800877Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.139812851Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.139824212Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.139898087Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.139924241Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.139937361Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.139949656Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.139960784Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.140108553Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:09:16.140929 env[1104]: time="2023-10-02T19:09:16.140191631Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:09:16.141295 env[1104]: time="2023-10-02T19:09:16.140480860Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:09:16.141295 env[1104]: time="2023-10-02T19:09:16.140516617Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:09:16.141295 env[1104]: time="2023-10-02T19:09:16.140529213Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:09:16.141295 env[1104]: time="2023-10-02T19:09:16.140606305Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:09:16.141295 env[1104]: time="2023-10-02T19:09:16.140619969Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:09:16.141295 env[1104]: time="2023-10-02T19:09:16.140646473Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:09:16.141295 env[1104]: time="2023-10-02T19:09:16.140657650Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:09:16.141295 env[1104]: time="2023-10-02T19:09:16.140669235Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:09:16.141295 env[1104]: time="2023-10-02T19:09:16.140679839Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:09:16.141295 env[1104]: time="2023-10-02T19:09:16.140749077Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:09:16.141295 env[1104]: time="2023-10-02T19:09:16.140770711Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:09:16.141295 env[1104]: time="2023-10-02T19:09:16.140783269Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:09:16.141794 env[1104]: time="2023-10-02T19:09:16.140902755Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:09:16.141794 env[1104]: time="2023-10-02T19:09:16.141545028Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:09:16.141794 env[1104]: time="2023-10-02T19:09:16.141585770Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:09:16.141794 env[1104]: time="2023-10-02T19:09:16.141602565Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:09:16.141794 env[1104]: time="2023-10-02T19:09:16.141616852Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:09:16.141794 env[1104]: time="2023-10-02T19:09:16.141627105Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:09:16.141794 env[1104]: time="2023-10-02T19:09:16.141655388Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:09:16.141794 env[1104]: time="2023-10-02T19:09:16.141692281Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:09:16.142186 env[1104]: time="2023-10-02T19:09:16.142139280Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:09:16.143753 env[1104]: time="2023-10-02T19:09:16.142351923Z" level=info msg="Connect containerd service" Oct 2 19:09:16.143753 env[1104]: time="2023-10-02T19:09:16.142395882Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:09:16.144280 env[1104]: time="2023-10-02T19:09:16.144259965Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:09:16.150564 env[1104]: time="2023-10-02T19:09:16.150212599Z" level=info msg="Start subscribing containerd event" Oct 2 19:09:16.150564 env[1104]: time="2023-10-02T19:09:16.150264169Z" level=info msg="Start recovering state" Oct 2 19:09:16.150564 env[1104]: time="2023-10-02T19:09:16.150348053Z" level=info msg="Start event monitor" Oct 2 19:09:16.150564 env[1104]: time="2023-10-02T19:09:16.150369222Z" level=info msg="Start snapshots syncer" Oct 2 19:09:16.150564 env[1104]: time="2023-10-02T19:09:16.150381098Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:09:16.150564 env[1104]: time="2023-10-02T19:09:16.150388397Z" level=info msg="Start streaming server" Oct 2 19:09:16.154088 env[1104]: time="2023-10-02T19:09:16.153825586Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:09:16.154088 env[1104]: time="2023-10-02T19:09:16.153912727Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:09:16.154088 env[1104]: time="2023-10-02T19:09:16.154028277Z" level=info msg="containerd successfully booted in 0.048062s" Oct 2 19:09:16.154190 systemd[1]: Started containerd.service. Oct 2 19:09:16.161887 systemd-networkd[1004]: eth0: Gained IPv6LL Oct 2 19:09:16.167449 tar[1101]: ./portmap Oct 2 19:09:16.206370 tar[1101]: ./host-local Oct 2 19:09:16.240506 locksmithd[1136]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:09:16.241878 tar[1101]: ./vrf Oct 2 19:09:16.284266 tar[1101]: ./bridge Oct 2 19:09:16.320533 tar[1101]: ./tuning Oct 2 19:09:16.351404 tar[1101]: ./firewall Oct 2 19:09:16.409349 tar[1101]: ./host-device Oct 2 19:09:16.441039 tar[1101]: ./sbr Oct 2 19:09:16.489187 tar[1101]: ./loopback Oct 2 19:09:16.520774 tar[1101]: ./dhcp Oct 2 19:09:16.621306 systemd[1]: Finished prepare-critools.service. Oct 2 19:09:16.653194 tar[1101]: ./ptp Oct 2 19:09:16.682343 tar[1101]: ./ipvlan Oct 2 19:09:16.709067 tar[1101]: ./bandwidth Oct 2 19:09:16.744230 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:09:17.096172 sshd_keygen[1103]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:09:17.115261 systemd[1]: Finished sshd-keygen.service. Oct 2 19:09:17.117433 systemd[1]: Starting issuegen.service... Oct 2 19:09:17.123348 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:09:17.123464 systemd[1]: Finished issuegen.service. Oct 2 19:09:17.125249 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:09:17.130952 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:09:17.132693 systemd[1]: Started getty@tty1.service. Oct 2 19:09:17.134208 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:09:17.134905 systemd[1]: Reached target getty.target. Oct 2 19:09:17.135683 systemd[1]: Reached target multi-user.target. Oct 2 19:09:17.137181 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:09:17.143220 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:09:17.143334 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:09:17.144060 systemd[1]: Startup finished in 766ms (kernel) + 7.255s (initrd) + 6.112s (userspace) = 14.134s. Oct 2 19:09:18.211883 systemd[1]: Created slice system-sshd.slice. Oct 2 19:09:18.212965 systemd[1]: Started sshd@0-10.0.0.51:22-10.0.0.1:43218.service. Oct 2 19:09:18.252715 sshd[1163]: Accepted publickey for core from 10.0.0.1 port 43218 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:09:18.254085 sshd[1163]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:18.261393 systemd[1]: Created slice user-500.slice. Oct 2 19:09:18.262389 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:09:18.263807 systemd-logind[1095]: New session 1 of user core. Oct 2 19:09:18.269889 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:09:18.271333 systemd[1]: Starting user@500.service... Oct 2 19:09:18.274887 (systemd)[1166]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:18.342470 systemd[1166]: Queued start job for default target default.target. Oct 2 19:09:18.342950 systemd[1166]: Reached target paths.target. Oct 2 19:09:18.342968 systemd[1166]: Reached target sockets.target. Oct 2 19:09:18.342980 systemd[1166]: Reached target timers.target. Oct 2 19:09:18.342991 systemd[1166]: Reached target basic.target. Oct 2 19:09:18.343026 systemd[1166]: Reached target default.target. Oct 2 19:09:18.343047 systemd[1166]: Startup finished in 62ms. Oct 2 19:09:18.343137 systemd[1]: Started user@500.service. Oct 2 19:09:18.344145 systemd[1]: Started session-1.scope. Oct 2 19:09:18.393841 systemd[1]: Started sshd@1-10.0.0.51:22-10.0.0.1:43234.service. Oct 2 19:09:18.426767 sshd[1175]: Accepted publickey for core from 10.0.0.1 port 43234 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:09:18.428132 sshd[1175]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:18.432016 systemd-logind[1095]: New session 2 of user core. Oct 2 19:09:18.432976 systemd[1]: Started session-2.scope. Oct 2 19:09:18.486289 sshd[1175]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:18.489572 systemd[1]: sshd@1-10.0.0.51:22-10.0.0.1:43234.service: Deactivated successfully. Oct 2 19:09:18.490211 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:09:18.490881 systemd-logind[1095]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:09:18.492348 systemd[1]: Started sshd@2-10.0.0.51:22-10.0.0.1:43238.service. Oct 2 19:09:18.493121 systemd-logind[1095]: Removed session 2. Oct 2 19:09:18.523823 sshd[1181]: Accepted publickey for core from 10.0.0.1 port 43238 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:09:18.525320 sshd[1181]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:18.528540 systemd-logind[1095]: New session 3 of user core. Oct 2 19:09:18.529339 systemd[1]: Started session-3.scope. Oct 2 19:09:18.577030 sshd[1181]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:18.579729 systemd[1]: sshd@2-10.0.0.51:22-10.0.0.1:43238.service: Deactivated successfully. Oct 2 19:09:18.580309 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:09:18.580830 systemd-logind[1095]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:09:18.581997 systemd[1]: Started sshd@3-10.0.0.51:22-10.0.0.1:43246.service. Oct 2 19:09:18.582648 systemd-logind[1095]: Removed session 3. Oct 2 19:09:18.612802 sshd[1187]: Accepted publickey for core from 10.0.0.1 port 43246 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:09:18.613987 sshd[1187]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:18.617444 systemd-logind[1095]: New session 4 of user core. Oct 2 19:09:18.618388 systemd[1]: Started session-4.scope. Oct 2 19:09:18.670815 sshd[1187]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:18.674224 systemd[1]: sshd@3-10.0.0.51:22-10.0.0.1:43246.service: Deactivated successfully. Oct 2 19:09:18.674776 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:09:18.675334 systemd-logind[1095]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:09:18.676317 systemd[1]: Started sshd@4-10.0.0.51:22-10.0.0.1:43260.service. Oct 2 19:09:18.677089 systemd-logind[1095]: Removed session 4. Oct 2 19:09:18.707817 sshd[1193]: Accepted publickey for core from 10.0.0.1 port 43260 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:09:18.708916 sshd[1193]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:18.711973 systemd-logind[1095]: New session 5 of user core. Oct 2 19:09:18.712689 systemd[1]: Started session-5.scope. Oct 2 19:09:18.769435 sudo[1197]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:09:18.769629 sudo[1197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:09:18.775780 dbus-daemon[1079]: \xd0\xdd8\x8e\x8aU: received setenforce notice (enforcing=-87722560) Oct 2 19:09:18.777950 sudo[1197]: pam_unix(sudo:session): session closed for user root Oct 2 19:09:18.780066 sshd[1193]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:18.782891 systemd[1]: sshd@4-10.0.0.51:22-10.0.0.1:43260.service: Deactivated successfully. Oct 2 19:09:18.783501 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:09:18.784146 systemd-logind[1095]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:09:18.785094 systemd[1]: Started sshd@5-10.0.0.51:22-10.0.0.1:43276.service. Oct 2 19:09:18.785889 systemd-logind[1095]: Removed session 5. Oct 2 19:09:18.818243 sshd[1201]: Accepted publickey for core from 10.0.0.1 port 43276 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:09:18.819466 sshd[1201]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:18.823027 systemd-logind[1095]: New session 6 of user core. Oct 2 19:09:18.823797 systemd[1]: Started session-6.scope. Oct 2 19:09:18.878700 sudo[1205]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:09:18.878963 sudo[1205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:09:18.882306 sudo[1205]: pam_unix(sudo:session): session closed for user root Oct 2 19:09:18.887090 sudo[1204]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:09:18.887257 sudo[1204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:09:18.895937 systemd[1]: Stopping audit-rules.service... Oct 2 19:09:18.897000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:09:18.897992 auditctl[1208]: No rules Oct 2 19:09:18.898297 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:09:18.898420 systemd[1]: Stopped audit-rules.service. Oct 2 19:09:18.899747 kernel: kauditd_printk_skb: 230 callbacks suppressed Oct 2 19:09:18.899808 kernel: audit: type=1305 audit(1696273758.897:160): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:09:18.899829 kernel: audit: type=1300 audit(1696273758.897:160): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc64bd4ee0 a2=420 a3=0 items=0 ppid=1 pid=1208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:18.897000 audit[1208]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc64bd4ee0 a2=420 a3=0 items=0 ppid=1 pid=1208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:18.899779 systemd[1]: Starting audit-rules.service... Oct 2 19:09:18.902566 kernel: audit: type=1327 audit(1696273758.897:160): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:09:18.897000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:09:18.897000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:18.905959 kernel: audit: type=1131 audit(1696273758.897:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:18.917701 augenrules[1225]: No rules Oct 2 19:09:18.918363 systemd[1]: Finished audit-rules.service. Oct 2 19:09:18.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:18.919211 sudo[1204]: pam_unix(sudo:session): session closed for user root Oct 2 19:09:18.920641 sshd[1201]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:18.918000 audit[1204]: USER_END pid=1204 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:09:18.923127 systemd[1]: sshd@5-10.0.0.51:22-10.0.0.1:43276.service: Deactivated successfully. Oct 2 19:09:18.923487 kernel: audit: type=1130 audit(1696273758.918:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:18.923546 kernel: audit: type=1106 audit(1696273758.918:163): pid=1204 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:09:18.923597 kernel: audit: type=1104 audit(1696273758.918:164): pid=1204 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:09:18.918000 audit[1204]: CRED_DISP pid=1204 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:09:18.923686 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:09:18.924194 systemd-logind[1095]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:09:18.926595 kernel: audit: type=1106 audit(1696273758.920:165): pid=1201 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:18.920000 audit[1201]: USER_END pid=1201 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:18.925312 systemd[1]: Started sshd@6-10.0.0.51:22-10.0.0.1:43286.service. Oct 2 19:09:18.926085 systemd-logind[1095]: Removed session 6. Oct 2 19:09:18.928580 kernel: audit: type=1104 audit(1696273758.920:166): pid=1201 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:18.920000 audit[1201]: CRED_DISP pid=1201 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:18.930909 kernel: audit: type=1131 audit(1696273758.921:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.51:22-10.0.0.1:43276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:18.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.51:22-10.0.0.1:43276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:18.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.51:22-10.0.0.1:43286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:18.959000 audit[1231]: USER_ACCT pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:18.960755 sshd[1231]: Accepted publickey for core from 10.0.0.1 port 43286 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:09:18.961000 audit[1231]: CRED_ACQ pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:18.961000 audit[1231]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9c9e72d0 a2=3 a3=0 items=0 ppid=1 pid=1231 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:18.961000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:18.962107 sshd[1231]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:18.966238 systemd-logind[1095]: New session 7 of user core. Oct 2 19:09:18.967114 systemd[1]: Started session-7.scope. Oct 2 19:09:18.969000 audit[1231]: USER_START pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:18.971000 audit[1233]: CRED_ACQ pid=1233 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:19.018000 audit[1234]: USER_ACCT pid=1234 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:09:19.018000 audit[1234]: CRED_REFR pid=1234 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:09:19.019964 sudo[1234]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:09:19.020124 sudo[1234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:09:19.020000 audit[1234]: USER_START pid=1234 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:09:19.531054 systemd[1]: Reloading. Oct 2 19:09:19.597669 /usr/lib/systemd/system-generators/torcx-generator[1264]: time="2023-10-02T19:09:19Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:09:19.598058 /usr/lib/systemd/system-generators/torcx-generator[1264]: time="2023-10-02T19:09:19Z" level=info msg="torcx already run" Oct 2 19:09:19.653313 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:09:19.653331 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:09:19.669920 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:09:19.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.725000 audit: BPF prog-id=37 op=LOAD Oct 2 19:09:19.725000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:09:19.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit: BPF prog-id=38 op=LOAD Oct 2 19:09:19.727000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit: BPF prog-id=39 op=LOAD Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit: BPF prog-id=40 op=LOAD Oct 2 19:09:19.727000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:09:19.727000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.727000 audit: BPF prog-id=41 op=LOAD Oct 2 19:09:19.727000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit: BPF prog-id=42 op=LOAD Oct 2 19:09:19.728000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit: BPF prog-id=43 op=LOAD Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.728000 audit: BPF prog-id=44 op=LOAD Oct 2 19:09:19.728000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:09:19.728000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit: BPF prog-id=45 op=LOAD Oct 2 19:09:19.729000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit: BPF prog-id=46 op=LOAD Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit: BPF prog-id=47 op=LOAD Oct 2 19:09:19.730000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:09:19.730000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.730000 audit: BPF prog-id=48 op=LOAD Oct 2 19:09:19.730000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit: BPF prog-id=49 op=LOAD Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.731000 audit: BPF prog-id=50 op=LOAD Oct 2 19:09:19.731000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:09:19.731000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:09:19.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:19.732000 audit: BPF prog-id=51 op=LOAD Oct 2 19:09:19.732000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:09:19.739880 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:09:19.745253 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:09:19.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:19.745688 systemd[1]: Reached target network-online.target. Oct 2 19:09:19.746986 systemd[1]: Started kubelet.service. Oct 2 19:09:19.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:19.756410 systemd[1]: Starting coreos-metadata.service... Oct 2 19:09:19.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:19.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:19.762328 systemd[1]: coreos-metadata.service: Deactivated successfully. Oct 2 19:09:19.762457 systemd[1]: Finished coreos-metadata.service. Oct 2 19:09:19.812916 kubelet[1305]: E1002 19:09:19.812738 1305 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:09:19.817111 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:09:19.817289 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:09:19.817000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:09:20.174071 systemd[1]: Stopped kubelet.service. Oct 2 19:09:20.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:20.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:20.187879 systemd[1]: Reloading. Oct 2 19:09:20.255768 /usr/lib/systemd/system-generators/torcx-generator[1371]: time="2023-10-02T19:09:20Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:09:20.255806 /usr/lib/systemd/system-generators/torcx-generator[1371]: time="2023-10-02T19:09:20Z" level=info msg="torcx already run" Oct 2 19:09:20.315144 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:09:20.315159 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:09:20.332129 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:09:20.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.391000 audit: BPF prog-id=52 op=LOAD Oct 2 19:09:20.391000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:09:20.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit: BPF prog-id=53 op=LOAD Oct 2 19:09:20.394000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit: BPF prog-id=54 op=LOAD Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.394000 audit: BPF prog-id=55 op=LOAD Oct 2 19:09:20.394000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:09:20.394000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit: BPF prog-id=56 op=LOAD Oct 2 19:09:20.395000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit: BPF prog-id=57 op=LOAD Oct 2 19:09:20.395000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.395000 audit: BPF prog-id=58 op=LOAD Oct 2 19:09:20.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.396000 audit: BPF prog-id=59 op=LOAD Oct 2 19:09:20.396000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:09:20.396000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit: BPF prog-id=60 op=LOAD Oct 2 19:09:20.398000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit: BPF prog-id=61 op=LOAD Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.398000 audit: BPF prog-id=62 op=LOAD Oct 2 19:09:20.398000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:09:20.398000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:09:20.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.399000 audit: BPF prog-id=63 op=LOAD Oct 2 19:09:20.399000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit: BPF prog-id=64 op=LOAD Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.400000 audit: BPF prog-id=65 op=LOAD Oct 2 19:09:20.401000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:09:20.401000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:09:20.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.402000 audit: BPF prog-id=66 op=LOAD Oct 2 19:09:20.402000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:09:20.416968 systemd[1]: Started kubelet.service. Oct 2 19:09:20.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:20.465401 kubelet[1412]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:09:20.465401 kubelet[1412]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:09:20.465401 kubelet[1412]: I1002 19:09:20.465319 1412 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:09:20.467020 kubelet[1412]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:09:20.467020 kubelet[1412]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:09:20.648054 kubelet[1412]: I1002 19:09:20.648015 1412 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:09:20.648054 kubelet[1412]: I1002 19:09:20.648045 1412 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:09:20.648279 kubelet[1412]: I1002 19:09:20.648265 1412 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:09:20.650143 kubelet[1412]: I1002 19:09:20.650087 1412 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:09:20.654123 kubelet[1412]: I1002 19:09:20.654036 1412 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:09:20.654283 kubelet[1412]: I1002 19:09:20.654243 1412 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:09:20.654321 kubelet[1412]: I1002 19:09:20.654311 1412 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:09:20.654447 kubelet[1412]: I1002 19:09:20.654336 1412 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:09:20.654447 kubelet[1412]: I1002 19:09:20.654347 1412 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:09:20.654447 kubelet[1412]: I1002 19:09:20.654441 1412 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:09:20.662444 kubelet[1412]: I1002 19:09:20.662403 1412 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:09:20.662444 kubelet[1412]: I1002 19:09:20.662431 1412 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:09:20.662652 kubelet[1412]: I1002 19:09:20.662469 1412 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:09:20.662652 kubelet[1412]: I1002 19:09:20.662495 1412 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:09:20.662652 kubelet[1412]: E1002 19:09:20.662559 1412 file.go:98] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:20.662652 kubelet[1412]: E1002 19:09:20.662633 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:20.664148 kubelet[1412]: I1002 19:09:20.664125 1412 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:09:20.664537 kubelet[1412]: W1002 19:09:20.664511 1412 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:09:20.665060 kubelet[1412]: I1002 19:09:20.665033 1412 server.go:1186] "Started kubelet" Oct 2 19:09:20.665668 kubelet[1412]: I1002 19:09:20.665643 1412 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:09:20.666701 kubelet[1412]: E1002 19:09:20.666676 1412 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:09:20.666701 kubelet[1412]: E1002 19:09:20.666704 1412 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:09:20.667225 kubelet[1412]: I1002 19:09:20.667206 1412 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:09:20.666000 audit[1412]: AVC avc: denied { mac_admin } for pid=1412 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.666000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:09:20.666000 audit[1412]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e92f60 a1=c000ea4828 a2=c000e92f30 a3=25 items=0 ppid=1 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.666000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:09:20.666000 audit[1412]: AVC avc: denied { mac_admin } for pid=1412 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.666000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:09:20.666000 audit[1412]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0000d5480 a1=c000ea4840 a2=c000e92ff0 a3=25 items=0 ppid=1 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.666000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:09:20.669043 kubelet[1412]: I1002 19:09:20.668488 1412 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:09:20.669043 kubelet[1412]: I1002 19:09:20.668530 1412 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:09:20.669043 kubelet[1412]: I1002 19:09:20.668624 1412 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:09:20.670296 kubelet[1412]: I1002 19:09:20.669745 1412 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:09:20.670296 kubelet[1412]: I1002 19:09:20.669830 1412 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:09:20.670650 kubelet[1412]: W1002 19:09:20.670629 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:09:20.670717 kubelet[1412]: E1002 19:09:20.670659 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:09:20.670803 kubelet[1412]: E1002 19:09:20.670684 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff8240f0cf", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 665006287, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 665006287, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:20.670977 kubelet[1412]: W1002 19:09:20.670954 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: nodes "10.0.0.51" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:09:20.670977 kubelet[1412]: E1002 19:09:20.670971 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: nodes "10.0.0.51" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:09:20.672262 kubelet[1412]: W1002 19:09:20.672229 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:09:20.672262 kubelet[1412]: E1002 19:09:20.672248 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:09:20.672442 kubelet[1412]: E1002 19:09:20.672312 1412 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: leases.coordination.k8s.io "10.0.0.51" is forbidden: User "system:anonymous" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease" Oct 2 19:09:20.672911 kubelet[1412]: E1002 19:09:20.672811 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff825ab44b", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 666694731, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 666694731, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:20.696105 kubelet[1412]: I1002 19:09:20.696053 1412 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:09:20.696105 kubelet[1412]: I1002 19:09:20.696084 1412 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:09:20.696105 kubelet[1412]: I1002 19:09:20.696106 1412 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:09:20.696996 kubelet[1412]: E1002 19:09:20.696871 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a4b0e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.51 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694979342, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694979342, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:20.697994 kubelet[1412]: E1002 19:09:20.697892 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a8a3a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.51 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694995514, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694995514, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:20.698994 kubelet[1412]: E1002 19:09:20.698840 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a95af", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.51 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694998447, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694998447, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:20.700981 kubelet[1412]: I1002 19:09:20.700943 1412 policy_none.go:49] "None policy: Start" Oct 2 19:09:20.700000 audit[1425]: NETFILTER_CFG table=mangle:2 family=2 entries=2 op=nft_register_chain pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.700000 audit[1425]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffca5e7f50 a2=0 a3=7fffca5e7f3c items=0 ppid=1412 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.700000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:09:20.702075 kubelet[1412]: I1002 19:09:20.702057 1412 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:09:20.702210 kubelet[1412]: I1002 19:09:20.702188 1412 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:09:20.702000 audit[1431]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.702000 audit[1431]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffe8e188e00 a2=0 a3=7ffe8e188dec items=0 ppid=1412 pid=1431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.702000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:09:20.709125 systemd[1]: Created slice kubepods.slice. Oct 2 19:09:20.714730 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:09:20.705000 audit[1433]: NETFILTER_CFG table=filter:4 family=2 entries=2 op=nft_register_chain pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.705000 audit[1433]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe59ab30f0 a2=0 a3=7ffe59ab30dc items=0 ppid=1412 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.705000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:09:20.727000 audit[1438]: NETFILTER_CFG table=filter:5 family=2 entries=2 op=nft_register_chain pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.727000 audit[1438]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe87c58640 a2=0 a3=7ffe87c5862c items=0 ppid=1412 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.727000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:09:20.729830 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:09:20.731279 kubelet[1412]: I1002 19:09:20.731252 1412 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:09:20.729000 audit[1412]: AVC avc: denied { mac_admin } for pid=1412 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:20.729000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:09:20.729000 audit[1412]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009fd290 a1=c000ac6f00 a2=c0009fd260 a3=25 items=0 ppid=1 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.729000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:09:20.731645 kubelet[1412]: I1002 19:09:20.731358 1412 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:09:20.731700 kubelet[1412]: I1002 19:09:20.731645 1412 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:09:20.732874 kubelet[1412]: E1002 19:09:20.732840 1412 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"10.0.0.51\" not found" Oct 2 19:09:20.739864 kubelet[1412]: E1002 19:09:20.739742 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff869df894", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 738211988, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 738211988, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:20.771070 kubelet[1412]: I1002 19:09:20.770871 1412 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.51" Oct 2 19:09:20.772188 kubelet[1412]: E1002 19:09:20.772149 1412 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.51" Oct 2 19:09:20.772275 kubelet[1412]: E1002 19:09:20.772119 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a4b0e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.51 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694979342, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 770814770, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a4b0e" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:20.773223 kubelet[1412]: E1002 19:09:20.773077 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a8a3a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.51 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694995514, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 770821355, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a8a3a" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:20.774246 kubelet[1412]: E1002 19:09:20.774173 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a95af", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.51 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694998447, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 770825774, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a95af" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:20.774000 audit[1443]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.774000 audit[1443]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffcaf00a770 a2=0 a3=7ffcaf00a75c items=0 ppid=1412 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.774000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:09:20.775000 audit[1444]: NETFILTER_CFG table=nat:7 family=2 entries=2 op=nft_register_chain pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.775000 audit[1444]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffcede873e0 a2=0 a3=7ffcede873cc items=0 ppid=1412 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.775000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:09:20.780000 audit[1447]: NETFILTER_CFG table=nat:8 family=2 entries=1 op=nft_register_rule pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.780000 audit[1447]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffcfde46700 a2=0 a3=7ffcfde466ec items=0 ppid=1412 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.780000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:09:20.785000 audit[1450]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.785000 audit[1450]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffc282f5e30 a2=0 a3=7ffc282f5e1c items=0 ppid=1412 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.785000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:09:20.786000 audit[1451]: NETFILTER_CFG table=nat:10 family=2 entries=1 op=nft_register_chain pid=1451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.786000 audit[1451]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe9fe8b070 a2=0 a3=7ffe9fe8b05c items=0 ppid=1412 pid=1451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.786000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:09:20.787000 audit[1452]: NETFILTER_CFG table=nat:11 family=2 entries=1 op=nft_register_chain pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.787000 audit[1452]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe02137440 a2=0 a3=7ffe0213742c items=0 ppid=1412 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.787000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:09:20.790000 audit[1454]: NETFILTER_CFG table=nat:12 family=2 entries=1 op=nft_register_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.790000 audit[1454]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffbae97dd0 a2=0 a3=7fffbae97dbc items=0 ppid=1412 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.790000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:09:20.793000 audit[1456]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.793000 audit[1456]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffdc3ab8f10 a2=0 a3=7ffdc3ab8efc items=0 ppid=1412 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.793000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:09:20.819000 audit[1459]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.819000 audit[1459]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7fff69b379b0 a2=0 a3=7fff69b3799c items=0 ppid=1412 pid=1459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.819000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:09:20.821000 audit[1461]: NETFILTER_CFG table=nat:15 family=2 entries=1 op=nft_register_rule pid=1461 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.821000 audit[1461]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffc9768cd60 a2=0 a3=7ffc9768cd4c items=0 ppid=1412 pid=1461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.821000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:09:20.827000 audit[1464]: NETFILTER_CFG table=nat:16 family=2 entries=1 op=nft_register_rule pid=1464 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.827000 audit[1464]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffdeb3f4630 a2=0 a3=7ffdeb3f461c items=0 ppid=1412 pid=1464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.827000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:09:20.829594 kubelet[1412]: I1002 19:09:20.829575 1412 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:09:20.828000 audit[1465]: NETFILTER_CFG table=mangle:17 family=10 entries=2 op=nft_register_chain pid=1465 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.828000 audit[1465]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffde577d460 a2=0 a3=7ffde577d44c items=0 ppid=1412 pid=1465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.828000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:09:20.829000 audit[1466]: NETFILTER_CFG table=mangle:18 family=2 entries=1 op=nft_register_chain pid=1466 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.829000 audit[1466]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdf9c0b860 a2=0 a3=7ffdf9c0b84c items=0 ppid=1412 pid=1466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.829000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:09:20.830000 audit[1467]: NETFILTER_CFG table=nat:19 family=10 entries=2 op=nft_register_chain pid=1467 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.830000 audit[1467]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffcb643c8b0 a2=0 a3=7ffcb643c89c items=0 ppid=1412 pid=1467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.830000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:09:20.830000 audit[1468]: NETFILTER_CFG table=nat:20 family=2 entries=1 op=nft_register_chain pid=1468 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.830000 audit[1468]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff7f842f50 a2=0 a3=7fff7f842f3c items=0 ppid=1412 pid=1468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.830000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:09:20.831000 audit[1470]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_chain pid=1470 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:20.831000 audit[1470]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcf3668ee0 a2=0 a3=7ffcf3668ecc items=0 ppid=1412 pid=1470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.831000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:09:20.832000 audit[1471]: NETFILTER_CFG table=nat:22 family=10 entries=1 op=nft_register_rule pid=1471 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.832000 audit[1471]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd09e38ba0 a2=0 a3=7ffd09e38b8c items=0 ppid=1412 pid=1471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.832000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:09:20.833000 audit[1472]: NETFILTER_CFG table=filter:23 family=10 entries=2 op=nft_register_chain pid=1472 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.833000 audit[1472]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffd3076dfe0 a2=0 a3=7ffd3076dfcc items=0 ppid=1412 pid=1472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.833000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:09:20.836000 audit[1474]: NETFILTER_CFG table=filter:24 family=10 entries=1 op=nft_register_rule pid=1474 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.836000 audit[1474]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffebbaffa40 a2=0 a3=7ffebbaffa2c items=0 ppid=1412 pid=1474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.836000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:09:20.837000 audit[1475]: NETFILTER_CFG table=nat:25 family=10 entries=1 op=nft_register_chain pid=1475 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.837000 audit[1475]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdfa381ac0 a2=0 a3=7ffdfa381aac items=0 ppid=1412 pid=1475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.837000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:09:20.838000 audit[1476]: NETFILTER_CFG table=nat:26 family=10 entries=1 op=nft_register_chain pid=1476 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.838000 audit[1476]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff066e79b0 a2=0 a3=7fff066e799c items=0 ppid=1412 pid=1476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.838000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:09:20.840000 audit[1478]: NETFILTER_CFG table=nat:27 family=10 entries=1 op=nft_register_rule pid=1478 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.840000 audit[1478]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd618c0580 a2=0 a3=7ffd618c056c items=0 ppid=1412 pid=1478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.840000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:09:20.842000 audit[1480]: NETFILTER_CFG table=nat:28 family=10 entries=2 op=nft_register_chain pid=1480 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.842000 audit[1480]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffdcebed760 a2=0 a3=7ffdcebed74c items=0 ppid=1412 pid=1480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.842000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:09:20.844000 audit[1482]: NETFILTER_CFG table=nat:29 family=10 entries=1 op=nft_register_rule pid=1482 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.844000 audit[1482]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffc60bd9bf0 a2=0 a3=7ffc60bd9bdc items=0 ppid=1412 pid=1482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.844000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:09:20.847000 audit[1484]: NETFILTER_CFG table=nat:30 family=10 entries=1 op=nft_register_rule pid=1484 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.847000 audit[1484]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffe94b52990 a2=0 a3=7ffe94b5297c items=0 ppid=1412 pid=1484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.847000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:09:20.850000 audit[1486]: NETFILTER_CFG table=nat:31 family=10 entries=1 op=nft_register_rule pid=1486 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.850000 audit[1486]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffc6f2975c0 a2=0 a3=7ffc6f2975ac items=0 ppid=1412 pid=1486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.850000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:09:20.851094 kubelet[1412]: I1002 19:09:20.850992 1412 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:09:20.851094 kubelet[1412]: I1002 19:09:20.851027 1412 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:09:20.851094 kubelet[1412]: I1002 19:09:20.851053 1412 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:09:20.851185 kubelet[1412]: E1002 19:09:20.851128 1412 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:09:20.851000 audit[1487]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=1487 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.851000 audit[1487]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe71efb600 a2=0 a3=7ffe71efb5ec items=0 ppid=1412 pid=1487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.851000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:09:20.852706 kubelet[1412]: W1002 19:09:20.852685 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:09:20.852706 kubelet[1412]: E1002 19:09:20.852711 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:09:20.852000 audit[1488]: NETFILTER_CFG table=nat:33 family=10 entries=1 op=nft_register_chain pid=1488 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.852000 audit[1488]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffea3f33ed0 a2=0 a3=7ffea3f33ebc items=0 ppid=1412 pid=1488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.852000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:09:20.852000 audit[1489]: NETFILTER_CFG table=filter:34 family=10 entries=1 op=nft_register_chain pid=1489 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:20.852000 audit[1489]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdab0d7e90 a2=0 a3=7ffdab0d7e7c items=0 ppid=1412 pid=1489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:20.852000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:09:20.873943 kubelet[1412]: E1002 19:09:20.873900 1412 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: leases.coordination.k8s.io "10.0.0.51" is forbidden: User "system:anonymous" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease" Oct 2 19:09:20.973621 kubelet[1412]: I1002 19:09:20.973578 1412 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.51" Oct 2 19:09:20.975133 kubelet[1412]: E1002 19:09:20.975097 1412 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.51" Oct 2 19:09:20.975328 kubelet[1412]: E1002 19:09:20.975068 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a4b0e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.51 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694979342, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 973498681, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a4b0e" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:20.976396 kubelet[1412]: E1002 19:09:20.976297 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a8a3a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.51 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694995514, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 973516281, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a8a3a" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:21.067130 kubelet[1412]: E1002 19:09:21.066926 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a95af", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.51 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694998447, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 973519755, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a95af" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:21.275426 kubelet[1412]: E1002 19:09:21.275360 1412 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: leases.coordination.k8s.io "10.0.0.51" is forbidden: User "system:anonymous" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease" Oct 2 19:09:21.376797 kubelet[1412]: I1002 19:09:21.376602 1412 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.51" Oct 2 19:09:21.377782 kubelet[1412]: E1002 19:09:21.377710 1412 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.51" Oct 2 19:09:21.377985 kubelet[1412]: E1002 19:09:21.377787 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a4b0e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.51 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694979342, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 21, 376525391, time.Local), Count:4, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a4b0e" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:21.467606 kubelet[1412]: E1002 19:09:21.467452 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a8a3a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.51 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694995514, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 21, 376538255, time.Local), Count:4, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a8a3a" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:21.663603 kubelet[1412]: E1002 19:09:21.663448 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:21.666883 kubelet[1412]: E1002 19:09:21.666786 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a95af", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.51 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694998447, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 21, 376541895, time.Local), Count:4, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a95af" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:21.719218 kubelet[1412]: W1002 19:09:21.719180 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:09:21.719218 kubelet[1412]: E1002 19:09:21.719235 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:09:21.951849 kubelet[1412]: W1002 19:09:21.951732 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:09:21.951849 kubelet[1412]: E1002 19:09:21.951766 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:09:22.002359 kubelet[1412]: W1002 19:09:22.002313 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: nodes "10.0.0.51" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:09:22.002359 kubelet[1412]: E1002 19:09:22.002354 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: nodes "10.0.0.51" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:09:22.076908 kubelet[1412]: E1002 19:09:22.076862 1412 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: leases.coordination.k8s.io "10.0.0.51" is forbidden: User "system:anonymous" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease" Oct 2 19:09:22.179324 kubelet[1412]: I1002 19:09:22.179256 1412 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.51" Oct 2 19:09:22.181124 kubelet[1412]: E1002 19:09:22.181081 1412 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.51" Oct 2 19:09:22.181364 kubelet[1412]: E1002 19:09:22.181105 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a4b0e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.51 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694979342, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 22, 179223034, time.Local), Count:5, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a4b0e" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:22.182232 kubelet[1412]: E1002 19:09:22.182169 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a8a3a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.51 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694995514, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 22, 179228322, time.Local), Count:5, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a8a3a" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:22.196862 kubelet[1412]: W1002 19:09:22.196809 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:09:22.196862 kubelet[1412]: E1002 19:09:22.196842 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:09:22.267410 kubelet[1412]: E1002 19:09:22.267215 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a95af", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.51 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694998447, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 22, 179230764, time.Local), Count:5, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a95af" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:22.664400 kubelet[1412]: E1002 19:09:22.664230 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:23.664826 kubelet[1412]: E1002 19:09:23.664754 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:23.678328 kubelet[1412]: E1002 19:09:23.678261 1412 controller.go:146] failed to ensure lease exists, will retry in 3.2s, error: leases.coordination.k8s.io "10.0.0.51" is forbidden: User "system:anonymous" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease" Oct 2 19:09:23.783057 kubelet[1412]: I1002 19:09:23.783015 1412 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.51" Oct 2 19:09:23.784451 kubelet[1412]: E1002 19:09:23.784426 1412 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.51" Oct 2 19:09:23.784577 kubelet[1412]: E1002 19:09:23.784453 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a4b0e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.51 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694979342, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 23, 782955979, time.Local), Count:6, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a4b0e" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:23.785602 kubelet[1412]: E1002 19:09:23.785530 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a8a3a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.51 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694995514, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 23, 782973929, time.Local), Count:6, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a8a3a" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:23.786518 kubelet[1412]: E1002 19:09:23.786396 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a95af", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.51 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694998447, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 23, 782977910, time.Local), Count:6, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a95af" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:24.151410 kubelet[1412]: W1002 19:09:24.151282 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:09:24.151410 kubelet[1412]: E1002 19:09:24.151322 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:09:24.370839 kubelet[1412]: W1002 19:09:24.370777 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:09:24.370839 kubelet[1412]: E1002 19:09:24.370821 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:09:24.444706 kubelet[1412]: W1002 19:09:24.444567 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: nodes "10.0.0.51" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:09:24.444706 kubelet[1412]: E1002 19:09:24.444610 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: nodes "10.0.0.51" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:09:24.665931 kubelet[1412]: E1002 19:09:24.665856 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:24.858889 kubelet[1412]: W1002 19:09:24.858750 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:09:24.858889 kubelet[1412]: E1002 19:09:24.858780 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:09:25.666138 kubelet[1412]: E1002 19:09:25.666057 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:26.666538 kubelet[1412]: E1002 19:09:26.666458 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:26.880534 kubelet[1412]: E1002 19:09:26.880475 1412 controller.go:146] failed to ensure lease exists, will retry in 6.4s, error: leases.coordination.k8s.io "10.0.0.51" is forbidden: User "system:anonymous" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease" Oct 2 19:09:26.985983 kubelet[1412]: I1002 19:09:26.985861 1412 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.51" Oct 2 19:09:26.987120 kubelet[1412]: E1002 19:09:26.987086 1412 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.51" Oct 2 19:09:26.987578 kubelet[1412]: E1002 19:09:26.987479 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a4b0e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.51 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694979342, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 26, 985814151, time.Local), Count:7, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a4b0e" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:26.988498 kubelet[1412]: E1002 19:09:26.988393 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a8a3a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.51 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694995514, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 26, 985825392, time.Local), Count:7, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a8a3a" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:26.989250 kubelet[1412]: E1002 19:09:26.989194 1412 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51.178a5fff840a95af", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.51", UID:"10.0.0.51", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.51 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.51"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 9, 20, 694998447, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 9, 26, 985829050, time.Local), Count:7, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.51.178a5fff840a95af" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:09:27.667469 kubelet[1412]: E1002 19:09:27.667391 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:27.917656 kubelet[1412]: W1002 19:09:27.917489 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:09:27.917656 kubelet[1412]: E1002 19:09:27.917536 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:09:28.668384 kubelet[1412]: E1002 19:09:28.668313 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:29.164972 kubelet[1412]: W1002 19:09:29.164835 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:09:29.164972 kubelet[1412]: E1002 19:09:29.164887 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:09:29.669347 kubelet[1412]: E1002 19:09:29.669304 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:29.741150 kubelet[1412]: W1002 19:09:29.741100 1412 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:09:29.741150 kubelet[1412]: E1002 19:09:29.741135 1412 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:09:30.650332 kubelet[1412]: I1002 19:09:30.650266 1412 transport.go:135] "Certificate rotation detected, shutting down client connections to start using new credentials" Oct 2 19:09:30.669534 kubelet[1412]: E1002 19:09:30.669482 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:30.733241 kubelet[1412]: E1002 19:09:30.733163 1412 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"10.0.0.51\" not found" Oct 2 19:09:31.014082 kubelet[1412]: E1002 19:09:31.013947 1412 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "10.0.0.51" not found Oct 2 19:09:31.670018 kubelet[1412]: I1002 19:09:31.669963 1412 apiserver.go:52] "Watching apiserver" Oct 2 19:09:31.670018 kubelet[1412]: E1002 19:09:31.670010 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:31.970479 kubelet[1412]: I1002 19:09:31.970290 1412 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:09:32.032651 kubelet[1412]: I1002 19:09:32.032565 1412 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:09:32.476651 kubelet[1412]: E1002 19:09:32.476519 1412 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "10.0.0.51" not found Oct 2 19:09:32.670932 kubelet[1412]: E1002 19:09:32.670856 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:33.285046 kubelet[1412]: E1002 19:09:33.284957 1412 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"10.0.0.51\" not found" node="10.0.0.51" Oct 2 19:09:33.388998 kubelet[1412]: I1002 19:09:33.388954 1412 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.51" Oct 2 19:09:33.672339 kubelet[1412]: E1002 19:09:33.672062 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:33.678044 kubelet[1412]: I1002 19:09:33.677946 1412 kubelet_node_status.go:73] "Successfully registered node" node="10.0.0.51" Oct 2 19:09:33.698631 kubelet[1412]: I1002 19:09:33.698510 1412 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:09:33.699104 kubelet[1412]: I1002 19:09:33.699024 1412 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:09:33.709268 systemd[1]: Created slice kubepods-besteffort-podf1f9d2e7_91f9_41fe_b5d7_592bdcb9fdba.slice. Oct 2 19:09:33.723149 systemd[1]: Created slice kubepods-besteffort-pod2afbc253_1435_4927_bd3b_497522076a83.slice. Oct 2 19:09:33.792882 kubelet[1412]: I1002 19:09:33.792849 1412 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.1.0/24" Oct 2 19:09:33.793520 env[1104]: time="2023-10-02T19:09:33.793441172Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:09:33.793927 kubelet[1412]: I1002 19:09:33.793696 1412 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.1.0/24" Oct 2 19:09:33.828158 kubelet[1412]: I1002 19:09:33.828103 1412 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:09:33.840710 systemd[1]: Created slice kubepods-besteffort-pod0abe2c4c_8414_4042_8fbc_8b2c83fe91a3.slice. Oct 2 19:09:33.842703 kubelet[1412]: I1002 19:09:33.842679 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/2afbc253-1435-4927-bd3b-497522076a83-cni-net-dir\") pod \"calico-node-wkxzl\" (UID: \"2afbc253-1435-4927-bd3b-497522076a83\") " pod="calico-system/calico-node-wkxzl" Oct 2 19:09:33.842794 kubelet[1412]: I1002 19:09:33.842716 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f1f9d2e7-91f9-41fe-b5d7-592bdcb9fdba-xtables-lock\") pod \"kube-proxy-p9fjw\" (UID: \"f1f9d2e7-91f9-41fe-b5d7-592bdcb9fdba\") " pod="kube-system/kube-proxy-p9fjw" Oct 2 19:09:33.842794 kubelet[1412]: I1002 19:09:33.842744 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2afbc253-1435-4927-bd3b-497522076a83-tigera-ca-bundle\") pod \"calico-node-wkxzl\" (UID: \"2afbc253-1435-4927-bd3b-497522076a83\") " pod="calico-system/calico-node-wkxzl" Oct 2 19:09:33.842853 kubelet[1412]: I1002 19:09:33.842838 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/2afbc253-1435-4927-bd3b-497522076a83-flexvol-driver-host\") pod \"calico-node-wkxzl\" (UID: \"2afbc253-1435-4927-bd3b-497522076a83\") " pod="calico-system/calico-node-wkxzl" Oct 2 19:09:33.842957 kubelet[1412]: I1002 19:09:33.842918 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/2afbc253-1435-4927-bd3b-497522076a83-cni-log-dir\") pod \"calico-node-wkxzl\" (UID: \"2afbc253-1435-4927-bd3b-497522076a83\") " pod="calico-system/calico-node-wkxzl" Oct 2 19:09:33.843000 kubelet[1412]: I1002 19:09:33.842978 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/2afbc253-1435-4927-bd3b-497522076a83-xtables-lock\") pod \"calico-node-wkxzl\" (UID: \"2afbc253-1435-4927-bd3b-497522076a83\") " pod="calico-system/calico-node-wkxzl" Oct 2 19:09:33.843028 kubelet[1412]: I1002 19:09:33.843001 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/2afbc253-1435-4927-bd3b-497522076a83-node-certs\") pod \"calico-node-wkxzl\" (UID: \"2afbc253-1435-4927-bd3b-497522076a83\") " pod="calico-system/calico-node-wkxzl" Oct 2 19:09:33.843028 kubelet[1412]: I1002 19:09:33.843021 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/2afbc253-1435-4927-bd3b-497522076a83-cni-bin-dir\") pod \"calico-node-wkxzl\" (UID: \"2afbc253-1435-4927-bd3b-497522076a83\") " pod="calico-system/calico-node-wkxzl" Oct 2 19:09:33.843082 kubelet[1412]: I1002 19:09:33.843056 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/f1f9d2e7-91f9-41fe-b5d7-592bdcb9fdba-kube-proxy\") pod \"kube-proxy-p9fjw\" (UID: \"f1f9d2e7-91f9-41fe-b5d7-592bdcb9fdba\") " pod="kube-system/kube-proxy-p9fjw" Oct 2 19:09:33.843128 kubelet[1412]: I1002 19:09:33.843092 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f1f9d2e7-91f9-41fe-b5d7-592bdcb9fdba-lib-modules\") pod \"kube-proxy-p9fjw\" (UID: \"f1f9d2e7-91f9-41fe-b5d7-592bdcb9fdba\") " pod="kube-system/kube-proxy-p9fjw" Oct 2 19:09:33.843128 kubelet[1412]: I1002 19:09:33.843113 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s6tgx\" (UniqueName: \"kubernetes.io/projected/f1f9d2e7-91f9-41fe-b5d7-592bdcb9fdba-kube-api-access-s6tgx\") pod \"kube-proxy-p9fjw\" (UID: \"f1f9d2e7-91f9-41fe-b5d7-592bdcb9fdba\") " pod="kube-system/kube-proxy-p9fjw" Oct 2 19:09:33.843187 kubelet[1412]: I1002 19:09:33.843131 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/2afbc253-1435-4927-bd3b-497522076a83-lib-modules\") pod \"calico-node-wkxzl\" (UID: \"2afbc253-1435-4927-bd3b-497522076a83\") " pod="calico-system/calico-node-wkxzl" Oct 2 19:09:33.843187 kubelet[1412]: I1002 19:09:33.843165 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/2afbc253-1435-4927-bd3b-497522076a83-var-run-calico\") pod \"calico-node-wkxzl\" (UID: \"2afbc253-1435-4927-bd3b-497522076a83\") " pod="calico-system/calico-node-wkxzl" Oct 2 19:09:33.843239 kubelet[1412]: I1002 19:09:33.843195 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/2afbc253-1435-4927-bd3b-497522076a83-var-lib-calico\") pod \"calico-node-wkxzl\" (UID: \"2afbc253-1435-4927-bd3b-497522076a83\") " pod="calico-system/calico-node-wkxzl" Oct 2 19:09:33.843239 kubelet[1412]: I1002 19:09:33.843214 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fn7dw\" (UniqueName: \"kubernetes.io/projected/2afbc253-1435-4927-bd3b-497522076a83-kube-api-access-fn7dw\") pod \"calico-node-wkxzl\" (UID: \"2afbc253-1435-4927-bd3b-497522076a83\") " pod="calico-system/calico-node-wkxzl" Oct 2 19:09:33.843239 kubelet[1412]: I1002 19:09:33.843240 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/2afbc253-1435-4927-bd3b-497522076a83-policysync\") pod \"calico-node-wkxzl\" (UID: \"2afbc253-1435-4927-bd3b-497522076a83\") " pod="calico-system/calico-node-wkxzl" Oct 2 19:09:33.931000 audit[1234]: USER_END pid=1234 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:09:33.933405 sudo[1234]: pam_unix(sudo:session): session closed for user root Oct 2 19:09:33.934118 kernel: kauditd_printk_skb: 474 callbacks suppressed Oct 2 19:09:33.934184 kernel: audit: type=1106 audit(1696273773.931:565): pid=1234 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:09:33.935105 sshd[1231]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:33.932000 audit[1234]: CRED_DISP pid=1234 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:09:33.937679 systemd[1]: sshd@6-10.0.0.51:22-10.0.0.1:43286.service: Deactivated successfully. Oct 2 19:09:33.938411 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:09:33.938999 systemd-logind[1095]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:09:33.941582 kernel: audit: type=1104 audit(1696273773.932:566): pid=1234 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:09:33.941644 kernel: audit: type=1106 audit(1696273773.934:567): pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:33.934000 audit[1231]: USER_END pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:33.939796 systemd-logind[1095]: Removed session 7. Oct 2 19:09:33.934000 audit[1231]: CRED_DISP pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:33.944395 kubelet[1412]: I1002 19:09:33.944364 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/0abe2c4c-8414-4042-8fbc-8b2c83fe91a3-var-lib-calico\") pod \"tigera-operator-54b47459dd-582m7\" (UID: \"0abe2c4c-8414-4042-8fbc-8b2c83fe91a3\") " pod="tigera-operator/tigera-operator-54b47459dd-582m7" Oct 2 19:09:33.944484 kubelet[1412]: I1002 19:09:33.944419 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bcl8x\" (UniqueName: \"kubernetes.io/projected/0abe2c4c-8414-4042-8fbc-8b2c83fe91a3-kube-api-access-bcl8x\") pod \"tigera-operator-54b47459dd-582m7\" (UID: \"0abe2c4c-8414-4042-8fbc-8b2c83fe91a3\") " pod="tigera-operator/tigera-operator-54b47459dd-582m7" Oct 2 19:09:33.945778 kernel: audit: type=1104 audit(1696273773.934:568): pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:33.945836 kernel: audit: type=1131 audit(1696273773.936:569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.51:22-10.0.0.1:43286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:33.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.51:22-10.0.0.1:43286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:34.045602 kubelet[1412]: E1002 19:09:34.045516 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.045602 kubelet[1412]: W1002 19:09:34.045542 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.045602 kubelet[1412]: E1002 19:09:34.045589 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.045888 kubelet[1412]: E1002 19:09:34.045837 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.045888 kubelet[1412]: W1002 19:09:34.045844 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.045888 kubelet[1412]: E1002 19:09:34.045853 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.046136 kubelet[1412]: E1002 19:09:34.046111 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.046136 kubelet[1412]: W1002 19:09:34.046122 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.046136 kubelet[1412]: E1002 19:09:34.046131 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.046311 kubelet[1412]: E1002 19:09:34.046296 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.046311 kubelet[1412]: W1002 19:09:34.046307 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.046311 kubelet[1412]: E1002 19:09:34.046317 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.046492 kubelet[1412]: E1002 19:09:34.046477 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.046492 kubelet[1412]: W1002 19:09:34.046486 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.046492 kubelet[1412]: E1002 19:09:34.046495 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.046679 kubelet[1412]: E1002 19:09:34.046661 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.046679 kubelet[1412]: W1002 19:09:34.046672 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.046679 kubelet[1412]: E1002 19:09:34.046681 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.046976 kubelet[1412]: E1002 19:09:34.046937 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.046976 kubelet[1412]: W1002 19:09:34.046969 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.047054 kubelet[1412]: E1002 19:09:34.047005 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.047293 kubelet[1412]: E1002 19:09:34.047267 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.047293 kubelet[1412]: W1002 19:09:34.047280 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.047293 kubelet[1412]: E1002 19:09:34.047295 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.047473 kubelet[1412]: E1002 19:09:34.047456 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.047473 kubelet[1412]: W1002 19:09:34.047468 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.047536 kubelet[1412]: E1002 19:09:34.047484 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.047659 kubelet[1412]: E1002 19:09:34.047646 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.047659 kubelet[1412]: W1002 19:09:34.047656 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.047735 kubelet[1412]: E1002 19:09:34.047669 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.047929 kubelet[1412]: E1002 19:09:34.047898 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.047929 kubelet[1412]: W1002 19:09:34.047926 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.048016 kubelet[1412]: E1002 19:09:34.047958 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.048127 kubelet[1412]: E1002 19:09:34.048109 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.048127 kubelet[1412]: W1002 19:09:34.048122 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.048216 kubelet[1412]: E1002 19:09:34.048136 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.048301 kubelet[1412]: E1002 19:09:34.048271 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.048301 kubelet[1412]: W1002 19:09:34.048284 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.048301 kubelet[1412]: E1002 19:09:34.048299 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.048569 kubelet[1412]: E1002 19:09:34.048541 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.048569 kubelet[1412]: W1002 19:09:34.048566 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.048631 kubelet[1412]: E1002 19:09:34.048582 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.048784 kubelet[1412]: E1002 19:09:34.048772 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.048784 kubelet[1412]: W1002 19:09:34.048782 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.048832 kubelet[1412]: E1002 19:09:34.048791 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.148312 kubelet[1412]: E1002 19:09:34.148259 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.148312 kubelet[1412]: W1002 19:09:34.148284 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.148312 kubelet[1412]: E1002 19:09:34.148313 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.148614 kubelet[1412]: E1002 19:09:34.148479 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.148614 kubelet[1412]: W1002 19:09:34.148488 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.148614 kubelet[1412]: E1002 19:09:34.148499 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.148738 kubelet[1412]: E1002 19:09:34.148670 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.148738 kubelet[1412]: W1002 19:09:34.148679 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.148738 kubelet[1412]: E1002 19:09:34.148692 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.148871 kubelet[1412]: E1002 19:09:34.148848 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.148871 kubelet[1412]: W1002 19:09:34.148861 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.148871 kubelet[1412]: E1002 19:09:34.148873 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.149035 kubelet[1412]: E1002 19:09:34.149014 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.149035 kubelet[1412]: W1002 19:09:34.149026 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.149117 kubelet[1412]: E1002 19:09:34.149038 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.149211 kubelet[1412]: E1002 19:09:34.149183 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.149211 kubelet[1412]: W1002 19:09:34.149194 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.149211 kubelet[1412]: E1002 19:09:34.149206 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.250656 kubelet[1412]: E1002 19:09:34.250522 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.250656 kubelet[1412]: W1002 19:09:34.250545 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.250656 kubelet[1412]: E1002 19:09:34.250583 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.250871 kubelet[1412]: E1002 19:09:34.250785 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.250871 kubelet[1412]: W1002 19:09:34.250795 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.250871 kubelet[1412]: E1002 19:09:34.250814 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.251024 kubelet[1412]: E1002 19:09:34.251009 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.251024 kubelet[1412]: W1002 19:09:34.251021 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.251112 kubelet[1412]: E1002 19:09:34.251032 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.251256 kubelet[1412]: E1002 19:09:34.251243 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.251256 kubelet[1412]: W1002 19:09:34.251253 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.251422 kubelet[1412]: E1002 19:09:34.251264 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.251422 kubelet[1412]: E1002 19:09:34.251403 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.251422 kubelet[1412]: W1002 19:09:34.251410 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.251422 kubelet[1412]: E1002 19:09:34.251420 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.251634 kubelet[1412]: E1002 19:09:34.251621 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.251634 kubelet[1412]: W1002 19:09:34.251631 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.251760 kubelet[1412]: E1002 19:09:34.251644 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.352374 kubelet[1412]: E1002 19:09:34.352342 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.352374 kubelet[1412]: W1002 19:09:34.352363 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.352374 kubelet[1412]: E1002 19:09:34.352385 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.352672 kubelet[1412]: E1002 19:09:34.352590 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.352672 kubelet[1412]: W1002 19:09:34.352598 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.352672 kubelet[1412]: E1002 19:09:34.352608 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.352793 kubelet[1412]: E1002 19:09:34.352771 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.352793 kubelet[1412]: W1002 19:09:34.352777 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.352793 kubelet[1412]: E1002 19:09:34.352785 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.352924 kubelet[1412]: E1002 19:09:34.352912 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.352924 kubelet[1412]: W1002 19:09:34.352920 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.353010 kubelet[1412]: E1002 19:09:34.352928 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.353070 kubelet[1412]: E1002 19:09:34.353060 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.353070 kubelet[1412]: W1002 19:09:34.353067 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.353143 kubelet[1412]: E1002 19:09:34.353075 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.353221 kubelet[1412]: E1002 19:09:34.353210 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.353266 kubelet[1412]: W1002 19:09:34.353219 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.353266 kubelet[1412]: E1002 19:09:34.353232 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.454647 kubelet[1412]: E1002 19:09:34.454598 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.454647 kubelet[1412]: W1002 19:09:34.454624 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.454647 kubelet[1412]: E1002 19:09:34.454646 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.454946 kubelet[1412]: E1002 19:09:34.454920 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.455018 kubelet[1412]: W1002 19:09:34.454948 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.455018 kubelet[1412]: E1002 19:09:34.454982 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.455268 kubelet[1412]: E1002 19:09:34.455236 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.455268 kubelet[1412]: W1002 19:09:34.455251 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.455369 kubelet[1412]: E1002 19:09:34.455271 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.455495 kubelet[1412]: E1002 19:09:34.455478 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.455495 kubelet[1412]: W1002 19:09:34.455490 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.455613 kubelet[1412]: E1002 19:09:34.455509 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.455821 kubelet[1412]: E1002 19:09:34.455797 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.455821 kubelet[1412]: W1002 19:09:34.455809 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.455821 kubelet[1412]: E1002 19:09:34.455822 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.456037 kubelet[1412]: E1002 19:09:34.456022 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.456037 kubelet[1412]: W1002 19:09:34.456032 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.456114 kubelet[1412]: E1002 19:09:34.456045 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.557270 kubelet[1412]: E1002 19:09:34.557135 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.557270 kubelet[1412]: W1002 19:09:34.557160 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.557270 kubelet[1412]: E1002 19:09:34.557197 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.557486 kubelet[1412]: E1002 19:09:34.557450 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.557486 kubelet[1412]: W1002 19:09:34.557460 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.557486 kubelet[1412]: E1002 19:09:34.557478 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.557804 kubelet[1412]: E1002 19:09:34.557763 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.557804 kubelet[1412]: W1002 19:09:34.557779 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.557804 kubelet[1412]: E1002 19:09:34.557796 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.558156 kubelet[1412]: E1002 19:09:34.558141 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.558156 kubelet[1412]: W1002 19:09:34.558154 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.558239 kubelet[1412]: E1002 19:09:34.558171 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.558439 kubelet[1412]: E1002 19:09:34.558424 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.558439 kubelet[1412]: W1002 19:09:34.558437 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.558503 kubelet[1412]: E1002 19:09:34.558451 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.558719 kubelet[1412]: E1002 19:09:34.558700 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.558719 kubelet[1412]: W1002 19:09:34.558713 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.558779 kubelet[1412]: E1002 19:09:34.558729 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.660454 kubelet[1412]: E1002 19:09:34.660361 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.660454 kubelet[1412]: W1002 19:09:34.660400 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.660454 kubelet[1412]: E1002 19:09:34.660430 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.664673 kubelet[1412]: E1002 19:09:34.660691 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.664673 kubelet[1412]: W1002 19:09:34.660702 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.664673 kubelet[1412]: E1002 19:09:34.660715 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.664673 kubelet[1412]: E1002 19:09:34.661011 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.664673 kubelet[1412]: W1002 19:09:34.661040 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.664673 kubelet[1412]: E1002 19:09:34.661074 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.664673 kubelet[1412]: E1002 19:09:34.661382 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.664673 kubelet[1412]: W1002 19:09:34.661392 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.664673 kubelet[1412]: E1002 19:09:34.661405 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.665860 kubelet[1412]: E1002 19:09:34.665808 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.665860 kubelet[1412]: W1002 19:09:34.665829 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.665860 kubelet[1412]: E1002 19:09:34.665846 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.666185 kubelet[1412]: E1002 19:09:34.666109 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.666185 kubelet[1412]: W1002 19:09:34.666119 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.666185 kubelet[1412]: E1002 19:09:34.666138 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.672859 kubelet[1412]: E1002 19:09:34.672667 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:34.687751 kubelet[1412]: E1002 19:09:34.687540 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.687751 kubelet[1412]: W1002 19:09:34.687573 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.687751 kubelet[1412]: E1002 19:09:34.687596 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.766960 kubelet[1412]: E1002 19:09:34.766909 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.766960 kubelet[1412]: W1002 19:09:34.766937 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.766960 kubelet[1412]: E1002 19:09:34.766962 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.767223 kubelet[1412]: E1002 19:09:34.767209 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.767223 kubelet[1412]: W1002 19:09:34.767220 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.767269 kubelet[1412]: E1002 19:09:34.767232 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.767425 kubelet[1412]: E1002 19:09:34.767406 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.767425 kubelet[1412]: W1002 19:09:34.767417 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.767476 kubelet[1412]: E1002 19:09:34.767427 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.767604 kubelet[1412]: E1002 19:09:34.767592 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.767604 kubelet[1412]: W1002 19:09:34.767602 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.767654 kubelet[1412]: E1002 19:09:34.767616 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.767806 kubelet[1412]: E1002 19:09:34.767771 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.767806 kubelet[1412]: W1002 19:09:34.767782 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.767806 kubelet[1412]: E1002 19:09:34.767792 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.869412 kubelet[1412]: E1002 19:09:34.869213 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.869412 kubelet[1412]: W1002 19:09:34.869249 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.869412 kubelet[1412]: E1002 19:09:34.869277 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.869669 kubelet[1412]: E1002 19:09:34.869472 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.869669 kubelet[1412]: W1002 19:09:34.869483 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.869669 kubelet[1412]: E1002 19:09:34.869496 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.869744 kubelet[1412]: E1002 19:09:34.869706 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.869744 kubelet[1412]: W1002 19:09:34.869716 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.869744 kubelet[1412]: E1002 19:09:34.869727 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.869925 kubelet[1412]: E1002 19:09:34.869897 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.869925 kubelet[1412]: W1002 19:09:34.869912 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.869925 kubelet[1412]: E1002 19:09:34.869926 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.870222 kubelet[1412]: E1002 19:09:34.870133 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.870222 kubelet[1412]: W1002 19:09:34.870141 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.870222 kubelet[1412]: E1002 19:09:34.870154 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.872990 kubelet[1412]: I1002 19:09:34.872976 1412 request.go:690] Waited for 1.172157255s due to client-side throttling, not priority and fairness, request: GET:https://10.0.0.44:6443/api/v1/namespaces/calico-system/secrets?fieldSelector=metadata.name%3Dnode-certs&limit=500&resourceVersion=0 Oct 2 19:09:34.889571 kubelet[1412]: E1002 19:09:34.889508 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.889571 kubelet[1412]: W1002 19:09:34.889572 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.889777 kubelet[1412]: E1002 19:09:34.889619 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.945765 kubelet[1412]: E1002 19:09:34.945708 1412 configmap.go:199] Couldn't get configMap calico-system/tigera-ca-bundle: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:09:34.945956 kubelet[1412]: E1002 19:09:34.945873 1412 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/2afbc253-1435-4927-bd3b-497522076a83-tigera-ca-bundle podName:2afbc253-1435-4927-bd3b-497522076a83 nodeName:}" failed. No retries permitted until 2023-10-02 19:09:35.44584934 +0000 UTC m=+15.023828703 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "tigera-ca-bundle" (UniqueName: "kubernetes.io/configmap/2afbc253-1435-4927-bd3b-497522076a83-tigera-ca-bundle") pod "calico-node-wkxzl" (UID: "2afbc253-1435-4927-bd3b-497522076a83") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:09:34.970672 kubelet[1412]: E1002 19:09:34.970629 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.970672 kubelet[1412]: W1002 19:09:34.970646 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.970672 kubelet[1412]: E1002 19:09:34.970675 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.970901 kubelet[1412]: E1002 19:09:34.970879 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.970901 kubelet[1412]: W1002 19:09:34.970891 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.970983 kubelet[1412]: E1002 19:09:34.970905 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.971107 kubelet[1412]: E1002 19:09:34.971085 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.971107 kubelet[1412]: W1002 19:09:34.971096 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.971107 kubelet[1412]: E1002 19:09:34.971109 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:34.971293 kubelet[1412]: E1002 19:09:34.971271 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:34.971293 kubelet[1412]: W1002 19:09:34.971282 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:34.971293 kubelet[1412]: E1002 19:09:34.971295 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.072099 kubelet[1412]: E1002 19:09:35.072067 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.072099 kubelet[1412]: W1002 19:09:35.072087 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.072099 kubelet[1412]: E1002 19:09:35.072107 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.072356 kubelet[1412]: E1002 19:09:35.072294 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.072356 kubelet[1412]: W1002 19:09:35.072303 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.072356 kubelet[1412]: E1002 19:09:35.072314 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.072513 kubelet[1412]: E1002 19:09:35.072493 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.072513 kubelet[1412]: W1002 19:09:35.072506 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.072597 kubelet[1412]: E1002 19:09:35.072521 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.072737 kubelet[1412]: E1002 19:09:35.072716 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.072737 kubelet[1412]: W1002 19:09:35.072727 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.072737 kubelet[1412]: E1002 19:09:35.072739 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.173318 kubelet[1412]: E1002 19:09:35.173188 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.173318 kubelet[1412]: W1002 19:09:35.173212 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.173318 kubelet[1412]: E1002 19:09:35.173242 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.173542 kubelet[1412]: E1002 19:09:35.173437 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.173542 kubelet[1412]: W1002 19:09:35.173446 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.173542 kubelet[1412]: E1002 19:09:35.173458 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.173669 kubelet[1412]: E1002 19:09:35.173649 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.173669 kubelet[1412]: W1002 19:09:35.173660 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.173753 kubelet[1412]: E1002 19:09:35.173677 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.173909 kubelet[1412]: E1002 19:09:35.173891 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.173909 kubelet[1412]: W1002 19:09:35.173906 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.174028 kubelet[1412]: E1002 19:09:35.173925 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.274856 kubelet[1412]: E1002 19:09:35.274813 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.274856 kubelet[1412]: W1002 19:09:35.274829 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.274856 kubelet[1412]: E1002 19:09:35.274850 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.275082 kubelet[1412]: E1002 19:09:35.275032 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.275082 kubelet[1412]: W1002 19:09:35.275044 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.275082 kubelet[1412]: E1002 19:09:35.275057 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.275267 kubelet[1412]: E1002 19:09:35.275242 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.275267 kubelet[1412]: W1002 19:09:35.275254 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.275366 kubelet[1412]: E1002 19:09:35.275269 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.275458 kubelet[1412]: E1002 19:09:35.275436 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.275458 kubelet[1412]: W1002 19:09:35.275448 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.275532 kubelet[1412]: E1002 19:09:35.275461 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.376432 kubelet[1412]: E1002 19:09:35.376391 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.376432 kubelet[1412]: W1002 19:09:35.376415 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.376432 kubelet[1412]: E1002 19:09:35.376442 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.376796 kubelet[1412]: E1002 19:09:35.376771 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.376796 kubelet[1412]: W1002 19:09:35.376784 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.376887 kubelet[1412]: E1002 19:09:35.376804 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.377023 kubelet[1412]: E1002 19:09:35.377005 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.377023 kubelet[1412]: W1002 19:09:35.377017 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.377114 kubelet[1412]: E1002 19:09:35.377035 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.377210 kubelet[1412]: E1002 19:09:35.377195 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.377210 kubelet[1412]: W1002 19:09:35.377206 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.377290 kubelet[1412]: E1002 19:09:35.377219 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.478072 kubelet[1412]: E1002 19:09:35.477967 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.478072 kubelet[1412]: W1002 19:09:35.477986 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.478072 kubelet[1412]: E1002 19:09:35.478005 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.478361 kubelet[1412]: E1002 19:09:35.478332 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.478361 kubelet[1412]: W1002 19:09:35.478343 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.478361 kubelet[1412]: E1002 19:09:35.478362 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.478605 kubelet[1412]: E1002 19:09:35.478571 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.478605 kubelet[1412]: W1002 19:09:35.478578 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.478605 kubelet[1412]: E1002 19:09:35.478588 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.478930 kubelet[1412]: E1002 19:09:35.478777 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.478930 kubelet[1412]: W1002 19:09:35.478786 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.478930 kubelet[1412]: E1002 19:09:35.478801 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.479040 kubelet[1412]: E1002 19:09:35.479027 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.479040 kubelet[1412]: W1002 19:09:35.479036 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.479092 kubelet[1412]: E1002 19:09:35.479045 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.479186 kubelet[1412]: E1002 19:09:35.479168 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.479186 kubelet[1412]: W1002 19:09:35.479177 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.479186 kubelet[1412]: E1002 19:09:35.479185 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.479320 kubelet[1412]: E1002 19:09:35.479306 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.479320 kubelet[1412]: W1002 19:09:35.479314 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.479320 kubelet[1412]: E1002 19:09:35.479322 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.479469 kubelet[1412]: E1002 19:09:35.479454 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.479469 kubelet[1412]: W1002 19:09:35.479463 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.479469 kubelet[1412]: E1002 19:09:35.479471 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.480241 kubelet[1412]: E1002 19:09:35.480218 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.480241 kubelet[1412]: W1002 19:09:35.480229 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.480241 kubelet[1412]: E1002 19:09:35.480239 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.579463 kubelet[1412]: E1002 19:09:35.579403 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.579463 kubelet[1412]: W1002 19:09:35.579426 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.579463 kubelet[1412]: E1002 19:09:35.579444 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.579794 kubelet[1412]: E1002 19:09:35.579725 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.579794 kubelet[1412]: W1002 19:09:35.579734 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.579794 kubelet[1412]: E1002 19:09:35.579745 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.579927 kubelet[1412]: E1002 19:09:35.579912 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.579927 kubelet[1412]: W1002 19:09:35.579922 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.579999 kubelet[1412]: E1002 19:09:35.579934 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.673509 kubelet[1412]: E1002 19:09:35.673445 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:35.680377 kubelet[1412]: E1002 19:09:35.680362 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.680377 kubelet[1412]: W1002 19:09:35.680376 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.680523 kubelet[1412]: E1002 19:09:35.680394 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.680787 kubelet[1412]: E1002 19:09:35.680635 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.680787 kubelet[1412]: W1002 19:09:35.680642 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.680787 kubelet[1412]: E1002 19:09:35.680653 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.680967 kubelet[1412]: E1002 19:09:35.680818 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.680967 kubelet[1412]: W1002 19:09:35.680825 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.680967 kubelet[1412]: E1002 19:09:35.680843 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.782518 kubelet[1412]: E1002 19:09:35.782383 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.782518 kubelet[1412]: W1002 19:09:35.782406 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.782518 kubelet[1412]: E1002 19:09:35.782429 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.782806 kubelet[1412]: E1002 19:09:35.782758 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.782806 kubelet[1412]: W1002 19:09:35.782800 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.782899 kubelet[1412]: E1002 19:09:35.782839 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.783566 kubelet[1412]: E1002 19:09:35.783514 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.783566 kubelet[1412]: W1002 19:09:35.783541 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.783668 kubelet[1412]: E1002 19:09:35.783600 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.885200 kubelet[1412]: E1002 19:09:35.885153 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.885200 kubelet[1412]: W1002 19:09:35.885177 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.885200 kubelet[1412]: E1002 19:09:35.885199 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.885522 kubelet[1412]: E1002 19:09:35.885497 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.885522 kubelet[1412]: W1002 19:09:35.885512 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.885657 kubelet[1412]: E1002 19:09:35.885523 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.885783 kubelet[1412]: E1002 19:09:35.885758 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.885783 kubelet[1412]: W1002 19:09:35.885771 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.885783 kubelet[1412]: E1002 19:09:35.885781 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.987359 kubelet[1412]: E1002 19:09:35.987308 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.987359 kubelet[1412]: W1002 19:09:35.987341 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.987359 kubelet[1412]: E1002 19:09:35.987375 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.987696 kubelet[1412]: E1002 19:09:35.987673 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.987696 kubelet[1412]: W1002 19:09:35.987684 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.987696 kubelet[1412]: E1002 19:09:35.987696 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:35.987903 kubelet[1412]: E1002 19:09:35.987882 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:35.987903 kubelet[1412]: W1002 19:09:35.987893 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:35.987903 kubelet[1412]: E1002 19:09:35.987905 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:36.084978 kubelet[1412]: E1002 19:09:36.084890 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:36.084978 kubelet[1412]: W1002 19:09:36.084909 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:36.084978 kubelet[1412]: E1002 19:09:36.084929 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:36.089408 kubelet[1412]: E1002 19:09:36.089298 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:36.089408 kubelet[1412]: W1002 19:09:36.089330 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:36.089408 kubelet[1412]: E1002 19:09:36.089359 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:36.089703 kubelet[1412]: E1002 19:09:36.089680 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:36.089703 kubelet[1412]: W1002 19:09:36.089692 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:36.089791 kubelet[1412]: E1002 19:09:36.089706 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:36.121123 kubelet[1412]: E1002 19:09:36.121048 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:36.122058 env[1104]: time="2023-10-02T19:09:36.122014328Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-p9fjw,Uid:f1f9d2e7-91f9-41fe-b5d7-592bdcb9fdba,Namespace:kube-system,Attempt:0,}" Oct 2 19:09:36.190786 kubelet[1412]: E1002 19:09:36.190749 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:36.190786 kubelet[1412]: W1002 19:09:36.190773 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:36.190786 kubelet[1412]: E1002 19:09:36.190795 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:36.191015 kubelet[1412]: E1002 19:09:36.190989 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:36.191015 kubelet[1412]: W1002 19:09:36.190995 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:36.191015 kubelet[1412]: E1002 19:09:36.191004 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:36.286203 kubelet[1412]: E1002 19:09:36.286171 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:36.286203 kubelet[1412]: W1002 19:09:36.286196 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:36.286363 kubelet[1412]: E1002 19:09:36.286220 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:36.291450 kubelet[1412]: E1002 19:09:36.291428 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:36.291450 kubelet[1412]: W1002 19:09:36.291439 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:36.291450 kubelet[1412]: E1002 19:09:36.291450 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:36.392869 kubelet[1412]: E1002 19:09:36.392755 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:36.392869 kubelet[1412]: W1002 19:09:36.392774 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:36.392869 kubelet[1412]: E1002 19:09:36.392796 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:36.426055 kubelet[1412]: E1002 19:09:36.425998 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:36.426632 env[1104]: time="2023-10-02T19:09:36.426571304Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-wkxzl,Uid:2afbc253-1435-4927-bd3b-497522076a83,Namespace:calico-system,Attempt:0,}" Oct 2 19:09:36.483571 kubelet[1412]: E1002 19:09:36.483529 1412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:09:36.483571 kubelet[1412]: W1002 19:09:36.483562 1412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:09:36.483724 kubelet[1412]: E1002 19:09:36.483587 1412 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:09:36.543239 env[1104]: time="2023-10-02T19:09:36.543186857Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-54b47459dd-582m7,Uid:0abe2c4c-8414-4042-8fbc-8b2c83fe91a3,Namespace:tigera-operator,Attempt:0,}" Oct 2 19:09:36.673830 kubelet[1412]: E1002 19:09:36.673662 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:36.714233 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3397594534.mount: Deactivated successfully. Oct 2 19:09:36.721968 env[1104]: time="2023-10-02T19:09:36.721900074Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:36.726020 env[1104]: time="2023-10-02T19:09:36.725947683Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:36.727177 env[1104]: time="2023-10-02T19:09:36.727120354Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:36.727701 env[1104]: time="2023-10-02T19:09:36.727681504Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:36.729453 env[1104]: time="2023-10-02T19:09:36.729416215Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:36.730931 env[1104]: time="2023-10-02T19:09:36.730877510Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:36.732210 env[1104]: time="2023-10-02T19:09:36.732167057Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:36.733626 env[1104]: time="2023-10-02T19:09:36.733583211Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:36.735174 env[1104]: time="2023-10-02T19:09:36.735132689Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:36.738597 env[1104]: time="2023-10-02T19:09:36.738537124Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:36.740849 env[1104]: time="2023-10-02T19:09:36.740788035Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:36.925958 env[1104]: time="2023-10-02T19:09:36.925805209Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:36.940542 env[1104]: time="2023-10-02T19:09:36.940461806Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:09:36.940756 env[1104]: time="2023-10-02T19:09:36.940521895Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:09:36.940756 env[1104]: time="2023-10-02T19:09:36.940536251Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:09:36.940849 env[1104]: time="2023-10-02T19:09:36.940734072Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8025e175be4f1e03ff56f457b9ea167043c1250fefe03c38aedd959d336b405b pid=1625 runtime=io.containerd.runc.v2 Oct 2 19:09:36.944103 env[1104]: time="2023-10-02T19:09:36.944013113Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:09:36.944103 env[1104]: time="2023-10-02T19:09:36.944061323Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:09:36.944253 env[1104]: time="2023-10-02T19:09:36.944082109Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:09:36.944253 env[1104]: time="2023-10-02T19:09:36.944190448Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3b29f8dea25b2fad4c7599297949bacdce0f43a593ff7ee881e4e4e0c56e6489 pid=1640 runtime=io.containerd.runc.v2 Oct 2 19:09:36.948677 env[1104]: time="2023-10-02T19:09:36.948593777Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:09:36.948677 env[1104]: time="2023-10-02T19:09:36.948677342Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:09:36.948852 env[1104]: time="2023-10-02T19:09:36.948707706Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:09:36.949052 env[1104]: time="2023-10-02T19:09:36.948940640Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7e8bfb118255f692bcc0a10d12f85536aa46949e3e028763db046ee48225e9aa pid=1647 runtime=io.containerd.runc.v2 Oct 2 19:09:36.977593 systemd[1]: Started cri-containerd-3b29f8dea25b2fad4c7599297949bacdce0f43a593ff7ee881e4e4e0c56e6489.scope. Oct 2 19:09:36.986028 systemd[1]: Started cri-containerd-8025e175be4f1e03ff56f457b9ea167043c1250fefe03c38aedd959d336b405b.scope. Oct 2 19:09:37.025078 systemd[1]: Started cri-containerd-7e8bfb118255f692bcc0a10d12f85536aa46949e3e028763db046ee48225e9aa.scope. Oct 2 19:09:37.134391 kernel: audit: type=1400 audit(1696273777.124:570): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134505 kernel: audit: type=1400 audit(1696273777.124:571): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134568 kernel: audit: type=1400 audit(1696273777.124:572): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.135448 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:09:37.135619 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:09:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.125000 audit: BPF prog-id=67 op=LOAD Oct 2 19:09:37.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.128000 audit: BPF prog-id=68 op=LOAD Oct 2 19:09:37.128000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.128000 audit[1668]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1640 pid=1668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362323966386465613235623266616434633735393932393739343962 Oct 2 19:09:37.129000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.129000 audit[1668]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=1640 pid=1668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362323966386465613235623266616434633735393932393739343962 Oct 2 19:09:37.129000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.129000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.129000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.129000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.129000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.129000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.129000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.129000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.129000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.129000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.129000 audit: BPF prog-id=69 op=LOAD Oct 2 19:09:37.129000 audit[1668]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000296950 items=0 ppid=1640 pid=1668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362323966386465613235623266616434633735393932393739343962 Oct 2 19:09:37.131000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.131000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.131000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.131000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.131000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.131000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.131000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.131000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134000 audit[1648]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1625 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830323565313735626534663165303366663536663435376239656131 Oct 2 19:09:37.134000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134000 audit[1648]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1625 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830323565313735626534663165303366663536663435376239656131 Oct 2 19:09:37.134000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.131000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.131000 audit: BPF prog-id=70 op=LOAD Oct 2 19:09:37.131000 audit[1668]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000296998 items=0 ppid=1640 pid=1668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362323966386465613235623266616434633735393932393739343962 Oct 2 19:09:37.136000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:09:37.136000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:09:37.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.136000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.136000 audit[1675]: AVC avc: denied { bpf } for pid=1675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.136000 audit[1675]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1647 pid=1675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765386266623131383235356636393262636330613130643132663835 Oct 2 19:09:37.136000 audit[1675]: AVC avc: denied { bpf } for pid=1675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.134000 audit[1648]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000185520 items=0 ppid=1625 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830323565313735626534663165303366663536663435376239656131 Oct 2 19:09:37.136000 audit[1675]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00032c710 items=0 ppid=1647 pid=1675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765386266623131383235356636393262636330613130643132663835 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { bpf } for pid=1675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { bpf } for pid=1675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { perfmon } for pid=1675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { perfmon } for pid=1675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { perfmon } for pid=1675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { perfmon } for pid=1675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { perfmon } for pid=1675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { bpf } for pid=1675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit: BPF prog-id=75 op=LOAD Oct 2 19:09:37.139000 audit[1648]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000185568 items=0 ppid=1625 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830323565313735626534663165303366663536663435376239656131 Oct 2 19:09:37.139000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { bpf } for pid=1675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit: BPF prog-id=76 op=LOAD Oct 2 19:09:37.139000 audit[1675]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00032c758 items=0 ppid=1647 pid=1675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765386266623131383235356636393262636330613130643132663835 Oct 2 19:09:37.139000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:09:37.139000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:09:37.139000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { bpf } for pid=1675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { bpf } for pid=1675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { bpf } for pid=1675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { perfmon } for pid=1675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { perfmon } for pid=1675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { perfmon } for pid=1648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { perfmon } for pid=1675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { perfmon } for pid=1675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { perfmon } for pid=1675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { bpf } for pid=1675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit[1675]: AVC avc: denied { bpf } for pid=1675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit: BPF prog-id=77 op=LOAD Oct 2 19:09:37.139000 audit[1648]: AVC avc: denied { bpf } for pid=1648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:37.139000 audit: BPF prog-id=78 op=LOAD Oct 2 19:09:37.139000 audit[1675]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00032cb68 items=0 ppid=1647 pid=1675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765386266623131383235356636393262636330613130643132663835 Oct 2 19:09:37.139000 audit[1648]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000185978 items=0 ppid=1625 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830323565313735626534663165303366663536663435376239656131 Oct 2 19:09:37.136000 audit[1668]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000296da8 items=0 ppid=1640 pid=1668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:37.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362323966386465613235623266616434633735393932393739343962 Oct 2 19:09:37.156663 env[1104]: time="2023-10-02T19:09:37.156597924Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-wkxzl,Uid:2afbc253-1435-4927-bd3b-497522076a83,Namespace:calico-system,Attempt:0,} returns sandbox id \"7e8bfb118255f692bcc0a10d12f85536aa46949e3e028763db046ee48225e9aa\"" Oct 2 19:09:37.157650 kubelet[1412]: E1002 19:09:37.157618 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:37.159364 env[1104]: time="2023-10-02T19:09:37.159320329Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\"" Oct 2 19:09:37.182479 env[1104]: time="2023-10-02T19:09:37.179505451Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-p9fjw,Uid:f1f9d2e7-91f9-41fe-b5d7-592bdcb9fdba,Namespace:kube-system,Attempt:0,} returns sandbox id \"8025e175be4f1e03ff56f457b9ea167043c1250fefe03c38aedd959d336b405b\"" Oct 2 19:09:37.184570 kubelet[1412]: E1002 19:09:37.184143 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:37.190089 env[1104]: time="2023-10-02T19:09:37.190038155Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-54b47459dd-582m7,Uid:0abe2c4c-8414-4042-8fbc-8b2c83fe91a3,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"3b29f8dea25b2fad4c7599297949bacdce0f43a593ff7ee881e4e4e0c56e6489\"" Oct 2 19:09:37.674121 kubelet[1412]: E1002 19:09:37.673967 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:38.675097 kubelet[1412]: E1002 19:09:38.675036 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:39.167778 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount279166697.mount: Deactivated successfully. Oct 2 19:09:39.675904 kubelet[1412]: E1002 19:09:39.675870 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:40.108994 env[1104]: time="2023-10-02T19:09:40.108855475Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:40.110968 env[1104]: time="2023-10-02T19:09:40.110883669Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:40.113026 env[1104]: time="2023-10-02T19:09:40.113002314Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:40.115425 env[1104]: time="2023-10-02T19:09:40.115350420Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:182a323c25a3503be8c504892a12a55d99a42c3a582cb8e93a1ecc7c193a44c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:40.116302 env[1104]: time="2023-10-02T19:09:40.116254410Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\" returns image reference \"sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72\"" Oct 2 19:09:40.117719 env[1104]: time="2023-10-02T19:09:40.117674340Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:09:40.118619 env[1104]: time="2023-10-02T19:09:40.118575678Z" level=info msg="CreateContainer within sandbox \"7e8bfb118255f692bcc0a10d12f85536aa46949e3e028763db046ee48225e9aa\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 2 19:09:40.133849 env[1104]: time="2023-10-02T19:09:40.133792263Z" level=info msg="CreateContainer within sandbox \"7e8bfb118255f692bcc0a10d12f85536aa46949e3e028763db046ee48225e9aa\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"921f7b8375bf4a0bfb534772fe34a6cda50aa85daecfb96ce4a639671e3512db\"" Oct 2 19:09:40.134619 env[1104]: time="2023-10-02T19:09:40.134572650Z" level=info msg="StartContainer for \"921f7b8375bf4a0bfb534772fe34a6cda50aa85daecfb96ce4a639671e3512db\"" Oct 2 19:09:40.152166 systemd[1]: Started cri-containerd-921f7b8375bf4a0bfb534772fe34a6cda50aa85daecfb96ce4a639671e3512db.scope. Oct 2 19:09:40.167000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.168959 kernel: kauditd_printk_skb: 228 callbacks suppressed Oct 2 19:09:40.169077 kernel: audit: type=1400 audit(1696273780.167:614): avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.167000 audit[1740]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1647 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:40.173999 kernel: audit: type=1300 audit(1696273780.167:614): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1647 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:40.174089 kernel: audit: type=1327 audit(1696273780.167:614): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932316637623833373562663461306266623533343737326665333461 Oct 2 19:09:40.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932316637623833373562663461306266623533343737326665333461 Oct 2 19:09:40.176790 kernel: audit: type=1400 audit(1696273780.170:615): avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.179288 kernel: audit: type=1400 audit(1696273780.170:615): avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.181158 kernel: audit: type=1400 audit(1696273780.170:615): avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.182982 kernel: audit: type=1400 audit(1696273780.170:615): avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.184958 kernel: audit: type=1400 audit(1696273780.170:615): avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.188955 kernel: audit: type=1400 audit(1696273780.170:615): avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.188996 kernel: audit: type=1400 audit(1696273780.170:615): avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit: BPF prog-id=79 op=LOAD Oct 2 19:09:40.170000 audit[1740]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000e1be0 items=0 ppid=1647 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:40.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932316637623833373562663461306266623533343737326665333461 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.170000 audit: BPF prog-id=80 op=LOAD Oct 2 19:09:40.170000 audit[1740]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000e1c28 items=0 ppid=1647 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:40.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932316637623833373562663461306266623533343737326665333461 Oct 2 19:09:40.176000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:09:40.176000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:09:40.176000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.176000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.176000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.176000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.176000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.176000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.176000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.176000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.176000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.176000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:40.176000 audit: BPF prog-id=81 op=LOAD Oct 2 19:09:40.176000 audit[1740]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000e1cb8 items=0 ppid=1647 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:40.176000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932316637623833373562663461306266623533343737326665333461 Oct 2 19:09:40.203900 env[1104]: time="2023-10-02T19:09:40.203852196Z" level=info msg="StartContainer for \"921f7b8375bf4a0bfb534772fe34a6cda50aa85daecfb96ce4a639671e3512db\" returns successfully" Oct 2 19:09:40.208594 systemd[1]: cri-containerd-921f7b8375bf4a0bfb534772fe34a6cda50aa85daecfb96ce4a639671e3512db.scope: Deactivated successfully. Oct 2 19:09:40.213000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:09:40.303361 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-921f7b8375bf4a0bfb534772fe34a6cda50aa85daecfb96ce4a639671e3512db-rootfs.mount: Deactivated successfully. Oct 2 19:09:40.361769 env[1104]: time="2023-10-02T19:09:40.361615465Z" level=info msg="shim disconnected" id=921f7b8375bf4a0bfb534772fe34a6cda50aa85daecfb96ce4a639671e3512db Oct 2 19:09:40.361769 env[1104]: time="2023-10-02T19:09:40.361679778Z" level=warning msg="cleaning up after shim disconnected" id=921f7b8375bf4a0bfb534772fe34a6cda50aa85daecfb96ce4a639671e3512db namespace=k8s.io Oct 2 19:09:40.361769 env[1104]: time="2023-10-02T19:09:40.361689315Z" level=info msg="cleaning up dead shim" Oct 2 19:09:40.368515 env[1104]: time="2023-10-02T19:09:40.368473270Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:09:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=1778 runtime=io.containerd.runc.v2\n" Oct 2 19:09:40.663275 kubelet[1412]: E1002 19:09:40.662841 1412 file.go:104] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:40.676166 kubelet[1412]: E1002 19:09:40.676111 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:40.884941 kubelet[1412]: E1002 19:09:40.884905 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:41.677448 kubelet[1412]: E1002 19:09:41.677255 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:41.837984 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2387397818.mount: Deactivated successfully. Oct 2 19:09:42.677844 kubelet[1412]: E1002 19:09:42.677797 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:42.732014 env[1104]: time="2023-10-02T19:09:42.731942940Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:42.736443 env[1104]: time="2023-10-02T19:09:42.736403525Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:42.738152 env[1104]: time="2023-10-02T19:09:42.738109822Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:42.739981 env[1104]: time="2023-10-02T19:09:42.739952758Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:42.740682 env[1104]: time="2023-10-02T19:09:42.740653071Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 19:09:42.741652 env[1104]: time="2023-10-02T19:09:42.741622059Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\"" Oct 2 19:09:42.742708 env[1104]: time="2023-10-02T19:09:42.742658801Z" level=info msg="CreateContainer within sandbox \"8025e175be4f1e03ff56f457b9ea167043c1250fefe03c38aedd959d336b405b\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:09:42.758756 env[1104]: time="2023-10-02T19:09:42.758693902Z" level=info msg="CreateContainer within sandbox \"8025e175be4f1e03ff56f457b9ea167043c1250fefe03c38aedd959d336b405b\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"2db0626533947b678b28aeb0867c2c5436c8b5334b88ff4e92724c519d7ac51c\"" Oct 2 19:09:42.759217 env[1104]: time="2023-10-02T19:09:42.759171053Z" level=info msg="StartContainer for \"2db0626533947b678b28aeb0867c2c5436c8b5334b88ff4e92724c519d7ac51c\"" Oct 2 19:09:42.780650 systemd[1]: Started cri-containerd-2db0626533947b678b28aeb0867c2c5436c8b5334b88ff4e92724c519d7ac51c.scope. Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1625 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:42.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264623036323635333339343762363738623238616562303836376332 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit: BPF prog-id=82 op=LOAD Oct 2 19:09:42.840000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000098c30 items=0 ppid=1625 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:42.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264623036323635333339343762363738623238616562303836376332 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit: BPF prog-id=83 op=LOAD Oct 2 19:09:42.840000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000098c78 items=0 ppid=1625 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:42.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264623036323635333339343762363738623238616562303836376332 Oct 2 19:09:42.840000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:09:42.840000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:42.840000 audit: BPF prog-id=84 op=LOAD Oct 2 19:09:42.840000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000098d08 items=0 ppid=1625 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:42.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264623036323635333339343762363738623238616562303836376332 Oct 2 19:09:42.858848 env[1104]: time="2023-10-02T19:09:42.858794098Z" level=info msg="StartContainer for \"2db0626533947b678b28aeb0867c2c5436c8b5334b88ff4e92724c519d7ac51c\" returns successfully" Oct 2 19:09:42.890065 kubelet[1412]: E1002 19:09:42.889993 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:42.909000 audit[1854]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=1854 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:42.909000 audit[1854]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff8629f7e0 a2=0 a3=7fff8629f7cc items=0 ppid=1814 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:42.909000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:09:42.910000 audit[1855]: NETFILTER_CFG table=mangle:36 family=10 entries=1 op=nft_register_chain pid=1855 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:42.910000 audit[1855]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb96802d0 a2=0 a3=7fffb96802bc items=0 ppid=1814 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:42.910000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:09:42.911000 audit[1857]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=1857 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:42.911000 audit[1857]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd1a95dc90 a2=0 a3=7ffd1a95dc7c items=0 ppid=1814 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:42.911000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:09:42.912000 audit[1858]: NETFILTER_CFG table=filter:38 family=2 entries=1 op=nft_register_chain pid=1858 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:42.912000 audit[1858]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcaafc4640 a2=0 a3=7ffcaafc462c items=0 ppid=1814 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:42.912000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:09:42.913000 audit[1859]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=1859 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:42.913000 audit[1859]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffef6f2ca40 a2=0 a3=7ffef6f2ca2c items=0 ppid=1814 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:42.913000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:09:42.917000 audit[1860]: NETFILTER_CFG table=filter:40 family=10 entries=1 op=nft_register_chain pid=1860 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:42.917000 audit[1860]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffca096e40 a2=0 a3=7fffca096e2c items=0 ppid=1814 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:42.917000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:09:43.017000 audit[1861]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=1861 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.017000 audit[1861]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff278507a0 a2=0 a3=7fff2785078c items=0 ppid=1814 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.017000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:09:43.021000 audit[1863]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_rule pid=1863 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.021000 audit[1863]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff997e38c0 a2=0 a3=7fff997e38ac items=0 ppid=1814 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.021000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:09:43.025000 audit[1866]: NETFILTER_CFG table=filter:43 family=2 entries=2 op=nft_register_chain pid=1866 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.025000 audit[1866]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc08b9b9b0 a2=0 a3=7ffc08b9b99c items=0 ppid=1814 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.025000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:09:43.026000 audit[1867]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=1867 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.026000 audit[1867]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb2be2340 a2=0 a3=7ffdb2be232c items=0 ppid=1814 pid=1867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.026000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:09:43.028000 audit[1869]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=1869 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.028000 audit[1869]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcba7acc00 a2=0 a3=7ffcba7acbec items=0 ppid=1814 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.028000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:09:43.031000 audit[1870]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_chain pid=1870 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.031000 audit[1870]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd9956e9b0 a2=0 a3=7ffd9956e99c items=0 ppid=1814 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.031000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:09:43.036000 audit[1872]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_rule pid=1872 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.036000 audit[1872]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe46325a20 a2=0 a3=7ffe46325a0c items=0 ppid=1814 pid=1872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.036000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:09:43.040000 audit[1875]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=1875 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.040000 audit[1875]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff96371bb0 a2=0 a3=7fff96371b9c items=0 ppid=1814 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.040000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:09:43.041000 audit[1876]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=1876 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.041000 audit[1876]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc51319700 a2=0 a3=7ffc513196ec items=0 ppid=1814 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.041000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:09:43.044000 audit[1878]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=1878 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.044000 audit[1878]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd65467240 a2=0 a3=7ffd6546722c items=0 ppid=1814 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.044000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:09:43.045000 audit[1879]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_chain pid=1879 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.045000 audit[1879]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd8d430160 a2=0 a3=7ffd8d43014c items=0 ppid=1814 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.045000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:09:43.048000 audit[1881]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=1881 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.048000 audit[1881]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe403399c0 a2=0 a3=7ffe403399ac items=0 ppid=1814 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.048000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:09:43.052000 audit[1884]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=1884 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.052000 audit[1884]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff3d097010 a2=0 a3=7fff3d096ffc items=0 ppid=1814 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.052000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:09:43.055000 audit[1887]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=1887 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.055000 audit[1887]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffa2ec3250 a2=0 a3=7fffa2ec323c items=0 ppid=1814 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.055000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:09:43.056000 audit[1888]: NETFILTER_CFG table=nat:55 family=2 entries=1 op=nft_register_chain pid=1888 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.056000 audit[1888]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff94f19e80 a2=0 a3=7fff94f19e6c items=0 ppid=1814 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.056000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:09:43.059000 audit[1890]: NETFILTER_CFG table=nat:56 family=2 entries=2 op=nft_register_chain pid=1890 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.059000 audit[1890]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fffabd7e910 a2=0 a3=7fffabd7e8fc items=0 ppid=1814 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.059000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:09:43.063000 audit[1893]: NETFILTER_CFG table=nat:57 family=2 entries=2 op=nft_register_chain pid=1893 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:09:43.063000 audit[1893]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffe0d327430 a2=0 a3=7ffe0d32741c items=0 ppid=1814 pid=1893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.063000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:09:43.075000 audit[1897]: NETFILTER_CFG table=filter:58 family=2 entries=6 op=nft_register_rule pid=1897 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:43.075000 audit[1897]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffd96d29760 a2=0 a3=7ffd96d2974c items=0 ppid=1814 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:43.086000 audit[1897]: NETFILTER_CFG table=nat:59 family=2 entries=24 op=nft_register_chain pid=1897 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:43.086000 audit[1897]: SYSCALL arch=c000003e syscall=46 success=yes exit=8836 a0=3 a1=7ffd96d29760 a2=0 a3=7ffd96d2974c items=0 ppid=1814 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.086000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:43.088000 audit[1903]: NETFILTER_CFG table=filter:60 family=10 entries=1 op=nft_register_chain pid=1903 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.088000 audit[1903]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe18e778e0 a2=0 a3=7ffe18e778cc items=0 ppid=1814 pid=1903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.088000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:09:43.090000 audit[1905]: NETFILTER_CFG table=filter:61 family=10 entries=2 op=nft_register_chain pid=1905 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.090000 audit[1905]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd81b29310 a2=0 a3=7ffd81b292fc items=0 ppid=1814 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.090000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:09:43.096000 audit[1908]: NETFILTER_CFG table=filter:62 family=10 entries=2 op=nft_register_chain pid=1908 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.096000 audit[1908]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffdfbc84ef0 a2=0 a3=7ffdfbc84edc items=0 ppid=1814 pid=1908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.096000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:09:43.097000 audit[1909]: NETFILTER_CFG table=filter:63 family=10 entries=1 op=nft_register_chain pid=1909 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.097000 audit[1909]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcfb231290 a2=0 a3=7ffcfb23127c items=0 ppid=1814 pid=1909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.097000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:09:43.100000 audit[1911]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_rule pid=1911 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.100000 audit[1911]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe519c3c40 a2=0 a3=7ffe519c3c2c items=0 ppid=1814 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.100000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:09:43.101000 audit[1912]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=1912 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.101000 audit[1912]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffca2b00b20 a2=0 a3=7ffca2b00b0c items=0 ppid=1814 pid=1912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.101000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:09:43.104000 audit[1914]: NETFILTER_CFG table=filter:66 family=10 entries=1 op=nft_register_rule pid=1914 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.104000 audit[1914]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffccda91640 a2=0 a3=7ffccda9162c items=0 ppid=1814 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.104000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:09:43.107000 audit[1917]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=1917 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.107000 audit[1917]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffc2a8c7e90 a2=0 a3=7ffc2a8c7e7c items=0 ppid=1814 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.107000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:09:43.108000 audit[1918]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=1918 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.108000 audit[1918]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc4ad28440 a2=0 a3=7ffc4ad2842c items=0 ppid=1814 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.108000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:09:43.110000 audit[1920]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=1920 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.110000 audit[1920]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe4a9efdf0 a2=0 a3=7ffe4a9efddc items=0 ppid=1814 pid=1920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.110000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:09:43.111000 audit[1921]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=1921 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.111000 audit[1921]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffebca454e0 a2=0 a3=7ffebca454cc items=0 ppid=1814 pid=1921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.111000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:09:43.113000 audit[1923]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=1923 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.113000 audit[1923]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe044c33d0 a2=0 a3=7ffe044c33bc items=0 ppid=1814 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.113000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:09:43.117000 audit[1926]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_rule pid=1926 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.117000 audit[1926]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffee6495ee0 a2=0 a3=7ffee6495ecc items=0 ppid=1814 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.117000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:09:43.122000 audit[1929]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_rule pid=1929 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.122000 audit[1929]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff1e2f18b0 a2=0 a3=7fff1e2f189c items=0 ppid=1814 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.122000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:09:43.123000 audit[1930]: NETFILTER_CFG table=nat:74 family=10 entries=1 op=nft_register_chain pid=1930 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.123000 audit[1930]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff2f7ab810 a2=0 a3=7fff2f7ab7fc items=0 ppid=1814 pid=1930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.123000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:09:43.125000 audit[1932]: NETFILTER_CFG table=nat:75 family=10 entries=2 op=nft_register_chain pid=1932 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.125000 audit[1932]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffcb6e1a6e0 a2=0 a3=7ffcb6e1a6cc items=0 ppid=1814 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.125000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:09:43.128000 audit[1935]: NETFILTER_CFG table=nat:76 family=10 entries=2 op=nft_register_chain pid=1935 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:09:43.128000 audit[1935]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffe64f61740 a2=0 a3=7ffe64f6172c items=0 ppid=1814 pid=1935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.128000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:09:43.134000 audit[1939]: NETFILTER_CFG table=filter:77 family=10 entries=3 op=nft_register_rule pid=1939 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:09:43.134000 audit[1939]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7fff56fe94d0 a2=0 a3=7fff56fe94bc items=0 ppid=1814 pid=1939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.134000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:43.135000 audit[1939]: NETFILTER_CFG table=nat:78 family=10 entries=10 op=nft_register_chain pid=1939 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:09:43.135000 audit[1939]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7fff56fe94d0 a2=0 a3=7fff56fe94bc items=0 ppid=1814 pid=1939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:43.135000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:43.678525 kubelet[1412]: E1002 19:09:43.678454 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:43.891803 kubelet[1412]: E1002 19:09:43.891756 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:44.025167 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2586198223.mount: Deactivated successfully. Oct 2 19:09:44.679540 kubelet[1412]: E1002 19:09:44.679477 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:45.340263 env[1104]: time="2023-10-02T19:09:45.340190660Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:45.342458 env[1104]: time="2023-10-02T19:09:45.342420326Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:45.344589 env[1104]: time="2023-10-02T19:09:45.344517466Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:45.346621 env[1104]: time="2023-10-02T19:09:45.346592869Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:89eef35e1bbe8c88792ce69c3f3f38fb9838e58602c570524350b5f3ab127582,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:45.347259 env[1104]: time="2023-10-02T19:09:45.347225913Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\" returns image reference \"sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1\"" Oct 2 19:09:45.347779 env[1104]: time="2023-10-02T19:09:45.347726059Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\"" Oct 2 19:09:45.348887 env[1104]: time="2023-10-02T19:09:45.348858460Z" level=info msg="CreateContainer within sandbox \"3b29f8dea25b2fad4c7599297949bacdce0f43a593ff7ee881e4e4e0c56e6489\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 2 19:09:45.361289 env[1104]: time="2023-10-02T19:09:45.361240876Z" level=info msg="CreateContainer within sandbox \"3b29f8dea25b2fad4c7599297949bacdce0f43a593ff7ee881e4e4e0c56e6489\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"4e92313a5603b41b356f7d124036e879b77eec08842d377684c71b0d9f9757bf\"" Oct 2 19:09:45.361646 env[1104]: time="2023-10-02T19:09:45.361620372Z" level=info msg="StartContainer for \"4e92313a5603b41b356f7d124036e879b77eec08842d377684c71b0d9f9757bf\"" Oct 2 19:09:45.381368 systemd[1]: Started cri-containerd-4e92313a5603b41b356f7d124036e879b77eec08842d377684c71b0d9f9757bf.scope. Oct 2 19:09:45.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.406273 kernel: kauditd_printk_skb: 209 callbacks suppressed Oct 2 19:09:45.406343 kernel: audit: type=1400 audit(1696273785.404:671): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.412024 kernel: audit: type=1400 audit(1696273785.404:672): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.412067 kernel: audit: type=1400 audit(1696273785.404:673): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.414981 kernel: audit: type=1400 audit(1696273785.404:674): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.420746 kernel: audit: type=1400 audit(1696273785.404:675): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.420795 kernel: audit: type=1400 audit(1696273785.404:676): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.426445 kernel: audit: type=1400 audit(1696273785.404:677): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.426492 kernel: audit: type=1400 audit(1696273785.404:678): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.433365 kernel: audit: type=1400 audit(1696273785.404:679): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.433458 kernel: audit: type=1400 audit(1696273785.408:680): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.408000 audit: BPF prog-id=85 op=LOAD Oct 2 19:09:45.409000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.409000 audit[1947]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1640 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:45.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465393233313361353630336234316233353666376431323430333665 Oct 2 19:09:45.409000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.409000 audit[1947]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1640 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:45.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465393233313361353630336234316233353666376431323430333665 Oct 2 19:09:45.409000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.409000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.409000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.409000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.409000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.409000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.409000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.409000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.409000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.409000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.409000 audit: BPF prog-id=86 op=LOAD Oct 2 19:09:45.409000 audit[1947]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003108e0 items=0 ppid=1640 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:45.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465393233313361353630336234316233353666376431323430333665 Oct 2 19:09:45.411000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.411000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.411000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.411000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.411000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.411000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.411000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.411000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.411000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.411000 audit: BPF prog-id=87 op=LOAD Oct 2 19:09:45.411000 audit[1947]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000310928 items=0 ppid=1640 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:45.411000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465393233313361353630336234316233353666376431323430333665 Oct 2 19:09:45.414000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:09:45.414000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:09:45.414000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.414000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.414000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.414000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.414000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.414000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.414000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.414000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.414000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.414000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:45.414000 audit: BPF prog-id=88 op=LOAD Oct 2 19:09:45.414000 audit[1947]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000310d38 items=0 ppid=1640 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:45.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465393233313361353630336234316233353666376431323430333665 Oct 2 19:09:45.465802 env[1104]: time="2023-10-02T19:09:45.465736418Z" level=info msg="StartContainer for \"4e92313a5603b41b356f7d124036e879b77eec08842d377684c71b0d9f9757bf\" returns successfully" Oct 2 19:09:45.680772 kubelet[1412]: E1002 19:09:45.680622 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:45.904583 kubelet[1412]: I1002 19:09:45.904523 1412 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-p9fjw" podStartSLOduration=-9.223372023950314e+09 pod.CreationTimestamp="2023-10-02 19:09:33 +0000 UTC" firstStartedPulling="2023-10-02 19:09:37.185364036 +0000 UTC m=+16.763343400" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:09:42.8981934 +0000 UTC m=+22.476172764" watchObservedRunningTime="2023-10-02 19:09:45.904463078 +0000 UTC m=+25.482442442" Oct 2 19:09:45.904775 kubelet[1412]: I1002 19:09:45.904616 1412 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-54b47459dd-582m7" podStartSLOduration=-9.223372023950174e+09 pod.CreationTimestamp="2023-10-02 19:09:33 +0000 UTC" firstStartedPulling="2023-10-02 19:09:37.191091434 +0000 UTC m=+16.769070797" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:09:45.904324034 +0000 UTC m=+25.482303398" watchObservedRunningTime="2023-10-02 19:09:45.904600981 +0000 UTC m=+25.482580345" Oct 2 19:09:46.681580 kubelet[1412]: E1002 19:09:46.681499 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:46.957857 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1772324368.mount: Deactivated successfully. Oct 2 19:09:47.681824 kubelet[1412]: E1002 19:09:47.681667 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:48.682310 kubelet[1412]: E1002 19:09:48.682234 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:49.683220 kubelet[1412]: E1002 19:09:49.683170 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:50.683815 kubelet[1412]: E1002 19:09:50.683769 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:51.435809 env[1104]: time="2023-10-02T19:09:51.435744944Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:51.437621 env[1104]: time="2023-10-02T19:09:51.437589798Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:51.439622 env[1104]: time="2023-10-02T19:09:51.439568885Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:51.441136 env[1104]: time="2023-10-02T19:09:51.441102809Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:34bf454be8cd5b9a35ab29c2479ff68a26497c2c87eb606e4bfe57c7fbeeff35,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:51.442874 env[1104]: time="2023-10-02T19:09:51.442815815Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\" returns image reference \"sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7\"" Oct 2 19:09:51.446326 env[1104]: time="2023-10-02T19:09:51.446274569Z" level=info msg="CreateContainer within sandbox \"7e8bfb118255f692bcc0a10d12f85536aa46949e3e028763db046ee48225e9aa\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 2 19:09:51.459952 env[1104]: time="2023-10-02T19:09:51.459884567Z" level=info msg="CreateContainer within sandbox \"7e8bfb118255f692bcc0a10d12f85536aa46949e3e028763db046ee48225e9aa\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"cc54771c231417daa23b0b6887dbf1ef2f96e8c1c524e3eebfc6a52b68ef5ebd\"" Oct 2 19:09:51.460482 env[1104]: time="2023-10-02T19:09:51.460442150Z" level=info msg="StartContainer for \"cc54771c231417daa23b0b6887dbf1ef2f96e8c1c524e3eebfc6a52b68ef5ebd\"" Oct 2 19:09:51.479469 systemd[1]: Started cri-containerd-cc54771c231417daa23b0b6887dbf1ef2f96e8c1c524e3eebfc6a52b68ef5ebd.scope. Oct 2 19:09:51.496000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.500209 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 2 19:09:51.500300 kernel: audit: type=1400 audit(1696273791.496:689): avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.500333 kernel: audit: type=1300 audit(1696273791.496:689): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1647 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:51.496000 audit[1986]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1647 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:51.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363353437373163323331343137646161323362306236383837646266 Oct 2 19:09:51.505349 kernel: audit: type=1327 audit(1696273791.496:689): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363353437373163323331343137646161323362306236383837646266 Oct 2 19:09:51.505408 kernel: audit: type=1400 audit(1696273791.496:690): avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.496000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.507071 kernel: audit: type=1400 audit(1696273791.496:690): avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.496000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.496000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.510539 kernel: audit: type=1400 audit(1696273791.496:690): avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.496000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.496000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.514968 kernel: audit: type=1400 audit(1696273791.496:690): avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.515029 kernel: audit: type=1400 audit(1696273791.496:690): avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.515056 kernel: audit: type=1400 audit(1696273791.496:690): avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.496000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.516720 kernel: audit: type=1400 audit(1696273791.496:690): avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.496000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.496000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.496000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.496000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.496000 audit: BPF prog-id=89 op=LOAD Oct 2 19:09:51.496000 audit[1986]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00028ab50 items=0 ppid=1647 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:51.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363353437373163323331343137646161323362306236383837646266 Oct 2 19:09:51.498000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.498000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.498000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.498000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.498000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.498000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.498000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.498000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.498000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.498000 audit: BPF prog-id=90 op=LOAD Oct 2 19:09:51.498000 audit[1986]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00028ab98 items=0 ppid=1647 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:51.498000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363353437373163323331343137646161323362306236383837646266 Oct 2 19:09:51.501000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:09:51.501000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:09:51.501000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.501000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.501000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.501000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.501000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.501000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.501000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.501000 audit[1986]: AVC avc: denied { perfmon } for pid=1986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.501000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.501000 audit[1986]: AVC avc: denied { bpf } for pid=1986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:51.501000 audit: BPF prog-id=91 op=LOAD Oct 2 19:09:51.501000 audit[1986]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00028ac28 items=0 ppid=1647 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:51.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363353437373163323331343137646161323362306236383837646266 Oct 2 19:09:51.524373 env[1104]: time="2023-10-02T19:09:51.524303356Z" level=info msg="StartContainer for \"cc54771c231417daa23b0b6887dbf1ef2f96e8c1c524e3eebfc6a52b68ef5ebd\" returns successfully" Oct 2 19:09:51.684377 kubelet[1412]: E1002 19:09:51.684285 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:51.909043 kubelet[1412]: E1002 19:09:51.908906 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:52.398514 systemd[1]: cri-containerd-cc54771c231417daa23b0b6887dbf1ef2f96e8c1c524e3eebfc6a52b68ef5ebd.scope: Deactivated successfully. Oct 2 19:09:52.402000 audit: BPF prog-id=91 op=UNLOAD Oct 2 19:09:52.428923 kubelet[1412]: I1002 19:09:52.428891 1412 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Oct 2 19:09:52.459748 kubelet[1412]: I1002 19:09:52.447619 1412 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:09:52.459748 kubelet[1412]: I1002 19:09:52.450107 1412 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:09:52.459748 kubelet[1412]: I1002 19:09:52.450210 1412 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:09:52.452652 systemd[1]: Created slice kubepods-burstable-poded16db42_82f4_4aab_9526_f9e38bea4f8d.slice. Oct 2 19:09:52.461094 kubelet[1412]: I1002 19:09:52.461061 1412 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:09:52.468537 kubelet[1412]: I1002 19:09:52.468499 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fm4b9\" (UniqueName: \"kubernetes.io/projected/d8cb181d-844b-47de-ac80-37f915850449-kube-api-access-fm4b9\") pod \"csi-node-driver-t6pgk\" (UID: \"d8cb181d-844b-47de-ac80-37f915850449\") " pod="calico-system/csi-node-driver-t6pgk" Oct 2 19:09:52.468537 kubelet[1412]: I1002 19:09:52.468581 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ftrgl\" (UniqueName: \"kubernetes.io/projected/61f3d390-437c-4801-8ce5-42be206b3103-kube-api-access-ftrgl\") pod \"coredns-787d4945fb-6j29f\" (UID: \"61f3d390-437c-4801-8ce5-42be206b3103\") " pod="kube-system/coredns-787d4945fb-6j29f" Oct 2 19:09:52.468753 kubelet[1412]: I1002 19:09:52.468620 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/d8cb181d-844b-47de-ac80-37f915850449-registration-dir\") pod \"csi-node-driver-t6pgk\" (UID: \"d8cb181d-844b-47de-ac80-37f915850449\") " pod="calico-system/csi-node-driver-t6pgk" Oct 2 19:09:52.468753 kubelet[1412]: I1002 19:09:52.468652 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/ed16db42-82f4-4aab-9526-f9e38bea4f8d-config-volume\") pod \"coredns-787d4945fb-87ck8\" (UID: \"ed16db42-82f4-4aab-9526-f9e38bea4f8d\") " pod="kube-system/coredns-787d4945fb-87ck8" Oct 2 19:09:52.468753 kubelet[1412]: I1002 19:09:52.468678 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etccalico\" (UniqueName: \"kubernetes.io/host-path/d8cb181d-844b-47de-ac80-37f915850449-etccalico\") pod \"csi-node-driver-t6pgk\" (UID: \"d8cb181d-844b-47de-ac80-37f915850449\") " pod="calico-system/csi-node-driver-t6pgk" Oct 2 19:09:52.468753 kubelet[1412]: I1002 19:09:52.468704 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-654dq\" (UniqueName: \"kubernetes.io/projected/5cb0ae04-309b-4665-b95a-ccaa3ac7692d-kube-api-access-654dq\") pod \"calico-kube-controllers-69c848ddc6-8p4pt\" (UID: \"5cb0ae04-309b-4665-b95a-ccaa3ac7692d\") " pod="calico-system/calico-kube-controllers-69c848ddc6-8p4pt" Oct 2 19:09:52.468753 kubelet[1412]: I1002 19:09:52.468731 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/d8cb181d-844b-47de-ac80-37f915850449-socket-dir\") pod \"csi-node-driver-t6pgk\" (UID: \"d8cb181d-844b-47de-ac80-37f915850449\") " pod="calico-system/csi-node-driver-t6pgk" Oct 2 19:09:52.468960 kubelet[1412]: I1002 19:09:52.468757 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/61f3d390-437c-4801-8ce5-42be206b3103-config-volume\") pod \"coredns-787d4945fb-6j29f\" (UID: \"61f3d390-437c-4801-8ce5-42be206b3103\") " pod="kube-system/coredns-787d4945fb-6j29f" Oct 2 19:09:52.468960 kubelet[1412]: I1002 19:09:52.468786 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6knzr\" (UniqueName: \"kubernetes.io/projected/ed16db42-82f4-4aab-9526-f9e38bea4f8d-kube-api-access-6knzr\") pod \"coredns-787d4945fb-87ck8\" (UID: \"ed16db42-82f4-4aab-9526-f9e38bea4f8d\") " pod="kube-system/coredns-787d4945fb-87ck8" Oct 2 19:09:52.468960 kubelet[1412]: I1002 19:09:52.468826 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/d8cb181d-844b-47de-ac80-37f915850449-varrun\") pod \"csi-node-driver-t6pgk\" (UID: \"d8cb181d-844b-47de-ac80-37f915850449\") " pod="calico-system/csi-node-driver-t6pgk" Oct 2 19:09:52.468960 kubelet[1412]: I1002 19:09:52.468853 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/d8cb181d-844b-47de-ac80-37f915850449-kubelet-dir\") pod \"csi-node-driver-t6pgk\" (UID: \"d8cb181d-844b-47de-ac80-37f915850449\") " pod="calico-system/csi-node-driver-t6pgk" Oct 2 19:09:52.469990 systemd[1]: run-containerd-runc-k8s.io-cc54771c231417daa23b0b6887dbf1ef2f96e8c1c524e3eebfc6a52b68ef5ebd-runc.VK7KHW.mount: Deactivated successfully. Oct 2 19:09:52.470085 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cc54771c231417daa23b0b6887dbf1ef2f96e8c1c524e3eebfc6a52b68ef5ebd-rootfs.mount: Deactivated successfully. Oct 2 19:09:52.473811 systemd[1]: Created slice kubepods-burstable-pod61f3d390_437c_4801_8ce5_42be206b3103.slice. Oct 2 19:09:52.480407 systemd[1]: Created slice kubepods-besteffort-pod5cb0ae04_309b_4665_b95a_ccaa3ac7692d.slice. Oct 2 19:09:52.484069 systemd[1]: Created slice kubepods-besteffort-podd8cb181d_844b_47de_ac80_37f915850449.slice. Oct 2 19:09:52.619431 env[1104]: time="2023-10-02T19:09:52.619372652Z" level=info msg="shim disconnected" id=cc54771c231417daa23b0b6887dbf1ef2f96e8c1c524e3eebfc6a52b68ef5ebd Oct 2 19:09:52.619431 env[1104]: time="2023-10-02T19:09:52.619425766Z" level=warning msg="cleaning up after shim disconnected" id=cc54771c231417daa23b0b6887dbf1ef2f96e8c1c524e3eebfc6a52b68ef5ebd namespace=k8s.io Oct 2 19:09:52.619431 env[1104]: time="2023-10-02T19:09:52.619436296Z" level=info msg="cleaning up dead shim" Oct 2 19:09:52.625765 env[1104]: time="2023-10-02T19:09:52.625732330Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:09:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2039 runtime=io.containerd.runc.v2\n" Oct 2 19:09:52.685454 kubelet[1412]: E1002 19:09:52.685305 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:52.772285 kubelet[1412]: E1002 19:09:52.772216 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:52.772893 env[1104]: time="2023-10-02T19:09:52.772837771Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-87ck8,Uid:ed16db42-82f4-4aab-9526-f9e38bea4f8d,Namespace:kube-system,Attempt:0,}" Oct 2 19:09:52.779301 kubelet[1412]: E1002 19:09:52.779258 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:52.779877 env[1104]: time="2023-10-02T19:09:52.779822300Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-6j29f,Uid:61f3d390-437c-4801-8ce5-42be206b3103,Namespace:kube-system,Attempt:0,}" Oct 2 19:09:52.782682 env[1104]: time="2023-10-02T19:09:52.782650758Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-8p4pt,Uid:5cb0ae04-309b-4665-b95a-ccaa3ac7692d,Namespace:calico-system,Attempt:0,}" Oct 2 19:09:52.786669 env[1104]: time="2023-10-02T19:09:52.786640785Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-t6pgk,Uid:d8cb181d-844b-47de-ac80-37f915850449,Namespace:calico-system,Attempt:0,}" Oct 2 19:09:52.868084 env[1104]: time="2023-10-02T19:09:52.867974686Z" level=error msg="Failed to destroy network for sandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.868408 env[1104]: time="2023-10-02T19:09:52.868378194Z" level=error msg="encountered an error cleaning up failed sandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.868473 env[1104]: time="2023-10-02T19:09:52.868425888Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-87ck8,Uid:ed16db42-82f4-4aab-9526-f9e38bea4f8d,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.868778 kubelet[1412]: E1002 19:09:52.868746 1412 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.868864 kubelet[1412]: E1002 19:09:52.868809 1412 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-87ck8" Oct 2 19:09:52.868864 kubelet[1412]: E1002 19:09:52.868829 1412 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-87ck8" Oct 2 19:09:52.868921 kubelet[1412]: E1002 19:09:52.868888 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-787d4945fb-87ck8_kube-system(ed16db42-82f4-4aab-9526-f9e38bea4f8d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-787d4945fb-87ck8_kube-system(ed16db42-82f4-4aab-9526-f9e38bea4f8d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-87ck8" podUID=ed16db42-82f4-4aab-9526-f9e38bea4f8d Oct 2 19:09:52.872379 env[1104]: time="2023-10-02T19:09:52.872319977Z" level=error msg="Failed to destroy network for sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.872736 env[1104]: time="2023-10-02T19:09:52.872671264Z" level=error msg="Failed to destroy network for sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.872907 env[1104]: time="2023-10-02T19:09:52.872791899Z" level=error msg="encountered an error cleaning up failed sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.872907 env[1104]: time="2023-10-02T19:09:52.872838791Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-8p4pt,Uid:5cb0ae04-309b-4665-b95a-ccaa3ac7692d,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.873001 env[1104]: time="2023-10-02T19:09:52.872918998Z" level=error msg="encountered an error cleaning up failed sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.873001 env[1104]: time="2023-10-02T19:09:52.872952173Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-6j29f,Uid:61f3d390-437c-4801-8ce5-42be206b3103,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.873093 kubelet[1412]: E1002 19:09:52.873021 1412 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.873093 kubelet[1412]: E1002 19:09:52.873060 1412 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-69c848ddc6-8p4pt" Oct 2 19:09:52.873093 kubelet[1412]: E1002 19:09:52.873078 1412 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-69c848ddc6-8p4pt" Oct 2 19:09:52.873212 kubelet[1412]: E1002 19:09:52.873117 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-69c848ddc6-8p4pt_calico-system(5cb0ae04-309b-4665-b95a-ccaa3ac7692d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-69c848ddc6-8p4pt_calico-system(5cb0ae04-309b-4665-b95a-ccaa3ac7692d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-69c848ddc6-8p4pt" podUID=5cb0ae04-309b-4665-b95a-ccaa3ac7692d Oct 2 19:09:52.873296 kubelet[1412]: E1002 19:09:52.873280 1412 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.873329 kubelet[1412]: E1002 19:09:52.873315 1412 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-6j29f" Oct 2 19:09:52.873361 kubelet[1412]: E1002 19:09:52.873333 1412 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-6j29f" Oct 2 19:09:52.873390 kubelet[1412]: E1002 19:09:52.873363 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-787d4945fb-6j29f_kube-system(61f3d390-437c-4801-8ce5-42be206b3103)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-787d4945fb-6j29f_kube-system(61f3d390-437c-4801-8ce5-42be206b3103)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-6j29f" podUID=61f3d390-437c-4801-8ce5-42be206b3103 Oct 2 19:09:52.876884 env[1104]: time="2023-10-02T19:09:52.876836984Z" level=error msg="Failed to destroy network for sandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.877340 env[1104]: time="2023-10-02T19:09:52.877295140Z" level=error msg="encountered an error cleaning up failed sandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.877385 env[1104]: time="2023-10-02T19:09:52.877346299Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-t6pgk,Uid:d8cb181d-844b-47de-ac80-37f915850449,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.877633 kubelet[1412]: E1002 19:09:52.877495 1412 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.877633 kubelet[1412]: E1002 19:09:52.877527 1412 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-t6pgk" Oct 2 19:09:52.877633 kubelet[1412]: E1002 19:09:52.877568 1412 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-t6pgk" Oct 2 19:09:52.877903 kubelet[1412]: E1002 19:09:52.877606 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-t6pgk_calico-system(d8cb181d-844b-47de-ac80-37f915850449)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-t6pgk_calico-system(d8cb181d-844b-47de-ac80-37f915850449)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-t6pgk" podUID=d8cb181d-844b-47de-ac80-37f915850449 Oct 2 19:09:52.911939 kubelet[1412]: E1002 19:09:52.911898 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:52.912672 env[1104]: time="2023-10-02T19:09:52.912625001Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 19:09:52.912852 kubelet[1412]: I1002 19:09:52.912719 1412 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:09:52.914030 kubelet[1412]: I1002 19:09:52.913993 1412 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:09:52.914624 env[1104]: time="2023-10-02T19:09:52.914583027Z" level=info msg="StopPodSandbox for \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\"" Oct 2 19:09:52.916195 kubelet[1412]: I1002 19:09:52.915966 1412 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:09:52.917824 kubelet[1412]: I1002 19:09:52.917725 1412 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:09:52.918188 env[1104]: time="2023-10-02T19:09:52.918151831Z" level=info msg="StopPodSandbox for \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\"" Oct 2 19:09:52.918955 env[1104]: time="2023-10-02T19:09:52.918926725Z" level=info msg="StopPodSandbox for \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\"" Oct 2 19:09:52.926074 env[1104]: time="2023-10-02T19:09:52.926017232Z" level=info msg="StopPodSandbox for \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\"" Oct 2 19:09:52.948832 env[1104]: time="2023-10-02T19:09:52.948672394Z" level=error msg="StopPodSandbox for \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\" failed" error="failed to destroy network for sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.949035 kubelet[1412]: E1002 19:09:52.948988 1412 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:09:52.949119 kubelet[1412]: E1002 19:09:52.949064 1412 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da} Oct 2 19:09:52.949119 kubelet[1412]: E1002 19:09:52.949112 1412 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5cb0ae04-309b-4665-b95a-ccaa3ac7692d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:09:52.949257 kubelet[1412]: E1002 19:09:52.949144 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5cb0ae04-309b-4665-b95a-ccaa3ac7692d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-69c848ddc6-8p4pt" podUID=5cb0ae04-309b-4665-b95a-ccaa3ac7692d Oct 2 19:09:52.949910 env[1104]: time="2023-10-02T19:09:52.949868331Z" level=error msg="StopPodSandbox for \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\" failed" error="failed to destroy network for sandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.950003 kubelet[1412]: E1002 19:09:52.949978 1412 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:09:52.950003 kubelet[1412]: E1002 19:09:52.950001 1412 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700} Oct 2 19:09:52.950241 kubelet[1412]: E1002 19:09:52.950029 1412 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ed16db42-82f4-4aab-9526-f9e38bea4f8d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:09:52.950241 kubelet[1412]: E1002 19:09:52.950053 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ed16db42-82f4-4aab-9526-f9e38bea4f8d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-87ck8" podUID=ed16db42-82f4-4aab-9526-f9e38bea4f8d Oct 2 19:09:52.955086 env[1104]: time="2023-10-02T19:09:52.955015390Z" level=error msg="StopPodSandbox for \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\" failed" error="failed to destroy network for sandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.955300 kubelet[1412]: E1002 19:09:52.955276 1412 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:09:52.955380 kubelet[1412]: E1002 19:09:52.955309 1412 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7} Oct 2 19:09:52.955380 kubelet[1412]: E1002 19:09:52.955340 1412 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d8cb181d-844b-47de-ac80-37f915850449\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:09:52.955380 kubelet[1412]: E1002 19:09:52.955366 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d8cb181d-844b-47de-ac80-37f915850449\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-t6pgk" podUID=d8cb181d-844b-47de-ac80-37f915850449 Oct 2 19:09:52.969772 env[1104]: time="2023-10-02T19:09:52.969696009Z" level=error msg="StopPodSandbox for \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\" failed" error="failed to destroy network for sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:52.969950 kubelet[1412]: E1002 19:09:52.969922 1412 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:09:52.969993 kubelet[1412]: E1002 19:09:52.969964 1412 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed} Oct 2 19:09:52.969993 kubelet[1412]: E1002 19:09:52.969993 1412 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"61f3d390-437c-4801-8ce5-42be206b3103\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:09:52.970087 kubelet[1412]: E1002 19:09:52.970026 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"61f3d390-437c-4801-8ce5-42be206b3103\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-6j29f" podUID=61f3d390-437c-4801-8ce5-42be206b3103 Oct 2 19:09:53.471474 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700-shm.mount: Deactivated successfully. Oct 2 19:09:53.685576 kubelet[1412]: E1002 19:09:53.685485 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:54.685904 kubelet[1412]: E1002 19:09:54.685836 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:55.434764 kubelet[1412]: I1002 19:09:55.434702 1412 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:09:55.450332 systemd[1]: Created slice kubepods-besteffort-podcc426a90_6f8a_4d10_915a_1d3b39a0fc73.slice. Oct 2 19:09:55.488656 kubelet[1412]: I1002 19:09:55.488580 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pzskx\" (UniqueName: \"kubernetes.io/projected/cc426a90-6f8a-4d10-915a-1d3b39a0fc73-kube-api-access-pzskx\") pod \"nginx-deployment-8ffc5cf85-tfbhr\" (UID: \"cc426a90-6f8a-4d10-915a-1d3b39a0fc73\") " pod="default/nginx-deployment-8ffc5cf85-tfbhr" Oct 2 19:09:55.686931 kubelet[1412]: E1002 19:09:55.686724 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:56.053907 env[1104]: time="2023-10-02T19:09:56.053740828Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:nginx-deployment-8ffc5cf85-tfbhr,Uid:cc426a90-6f8a-4d10-915a-1d3b39a0fc73,Namespace:default,Attempt:0,}" Oct 2 19:09:56.687292 kubelet[1412]: E1002 19:09:56.687233 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:56.762834 env[1104]: time="2023-10-02T19:09:56.762595984Z" level=error msg="Failed to destroy network for sandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:56.763386 env[1104]: time="2023-10-02T19:09:56.763337662Z" level=error msg="encountered an error cleaning up failed sandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:56.763472 env[1104]: time="2023-10-02T19:09:56.763422396Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:nginx-deployment-8ffc5cf85-tfbhr,Uid:cc426a90-6f8a-4d10-915a-1d3b39a0fc73,Namespace:default,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:56.764045 kubelet[1412]: E1002 19:09:56.763967 1412 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:56.764363 kubelet[1412]: E1002 19:09:56.764138 1412 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="default/nginx-deployment-8ffc5cf85-tfbhr" Oct 2 19:09:56.764363 kubelet[1412]: E1002 19:09:56.764205 1412 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="default/nginx-deployment-8ffc5cf85-tfbhr" Oct 2 19:09:56.764530 kubelet[1412]: E1002 19:09:56.764399 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"nginx-deployment-8ffc5cf85-tfbhr_default(cc426a90-6f8a-4d10-915a-1d3b39a0fc73)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"nginx-deployment-8ffc5cf85-tfbhr_default(cc426a90-6f8a-4d10-915a-1d3b39a0fc73)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="default/nginx-deployment-8ffc5cf85-tfbhr" podUID=cc426a90-6f8a-4d10-915a-1d3b39a0fc73 Oct 2 19:09:56.765535 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503-shm.mount: Deactivated successfully. Oct 2 19:09:56.929766 kubelet[1412]: I1002 19:09:56.929732 1412 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:09:56.930435 env[1104]: time="2023-10-02T19:09:56.930382288Z" level=info msg="StopPodSandbox for \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\"" Oct 2 19:09:56.961211 env[1104]: time="2023-10-02T19:09:56.961065653Z" level=error msg="StopPodSandbox for \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\" failed" error="failed to destroy network for sandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:09:56.961929 kubelet[1412]: E1002 19:09:56.961896 1412 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:09:56.962047 kubelet[1412]: E1002 19:09:56.961984 1412 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503} Oct 2 19:09:56.962047 kubelet[1412]: E1002 19:09:56.962031 1412 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"cc426a90-6f8a-4d10-915a-1d3b39a0fc73\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:09:56.962211 kubelet[1412]: E1002 19:09:56.962093 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"cc426a90-6f8a-4d10-915a-1d3b39a0fc73\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="default/nginx-deployment-8ffc5cf85-tfbhr" podUID=cc426a90-6f8a-4d10-915a-1d3b39a0fc73 Oct 2 19:09:57.688344 kubelet[1412]: E1002 19:09:57.688265 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:58.689276 kubelet[1412]: E1002 19:09:58.689207 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:58.691508 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3441604013.mount: Deactivated successfully. Oct 2 19:09:59.008833 env[1104]: time="2023-10-02T19:09:59.007332753Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:59.011128 env[1104]: time="2023-10-02T19:09:59.011083119Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:59.016445 env[1104]: time="2023-10-02T19:09:59.016393385Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:59.019639 env[1104]: time="2023-10-02T19:09:59.019597326Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e898f4b7b55c908c88dad008ae939024e71ed93c5effbb10cca891b658b2f001,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:09:59.020079 env[1104]: time="2023-10-02T19:09:59.020046864Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" returns image reference \"sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e\"" Oct 2 19:09:59.022545 env[1104]: time="2023-10-02T19:09:59.022430824Z" level=info msg="CreateContainer within sandbox \"7e8bfb118255f692bcc0a10d12f85536aa46949e3e028763db046ee48225e9aa\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 2 19:09:59.047246 env[1104]: time="2023-10-02T19:09:59.047170858Z" level=info msg="CreateContainer within sandbox \"7e8bfb118255f692bcc0a10d12f85536aa46949e3e028763db046ee48225e9aa\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"3894e644aa3b5b1cc4843dd5bf825e3e2336f7afc28b82b81a6e43737f7f4fba\"" Oct 2 19:09:59.048127 env[1104]: time="2023-10-02T19:09:59.048086564Z" level=info msg="StartContainer for \"3894e644aa3b5b1cc4843dd5bf825e3e2336f7afc28b82b81a6e43737f7f4fba\"" Oct 2 19:09:59.065958 systemd[1]: Started cri-containerd-3894e644aa3b5b1cc4843dd5bf825e3e2336f7afc28b82b81a6e43737f7f4fba.scope. Oct 2 19:09:59.091475 kernel: kauditd_printk_skb: 34 callbacks suppressed Oct 2 19:09:59.091701 kernel: audit: type=1400 audit(1696273799.080:696): avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.091749 kernel: audit: type=1300 audit(1696273799.080:696): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1647 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:59.091790 kernel: audit: type=1327 audit(1696273799.080:696): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338393465363434616133623562316363343834336464356266383235 Oct 2 19:09:59.091829 kernel: audit: type=1400 audit(1696273799.080:697): avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.091860 kernel: audit: type=1400 audit(1696273799.080:697): avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.080000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.080000 audit[2367]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1647 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:59.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338393465363434616133623562316363343834336464356266383235 Oct 2 19:09:59.080000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.080000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.080000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.095295 kernel: audit: type=1400 audit(1696273799.080:697): avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.095403 kernel: audit: type=1400 audit(1696273799.080:697): avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.080000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.080000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.098979 kernel: audit: type=1400 audit(1696273799.080:697): avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.099143 kernel: audit: type=1400 audit(1696273799.080:697): avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.080000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.100888 kernel: audit: type=1400 audit(1696273799.080:697): avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.080000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.080000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.080000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.080000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.080000 audit: BPF prog-id=92 op=LOAD Oct 2 19:09:59.080000 audit[2367]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000302800 items=0 ppid=1647 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:59.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338393465363434616133623562316363343834336464356266383235 Oct 2 19:09:59.083000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.083000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.083000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.083000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.083000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.083000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.083000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.083000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.083000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.083000 audit: BPF prog-id=93 op=LOAD Oct 2 19:09:59.083000 audit[2367]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000302848 items=0 ppid=1647 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:59.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338393465363434616133623562316363343834336464356266383235 Oct 2 19:09:59.088000 audit: BPF prog-id=93 op=UNLOAD Oct 2 19:09:59.088000 audit: BPF prog-id=92 op=UNLOAD Oct 2 19:09:59.088000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.088000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.088000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.088000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.088000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.088000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.088000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.088000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.088000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.088000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:09:59.088000 audit: BPF prog-id=94 op=LOAD Oct 2 19:09:59.088000 audit[2367]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003028d8 items=0 ppid=1647 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:59.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338393465363434616133623562316363343834336464356266383235 Oct 2 19:09:59.114977 env[1104]: time="2023-10-02T19:09:59.114913702Z" level=info msg="StartContainer for \"3894e644aa3b5b1cc4843dd5bf825e3e2336f7afc28b82b81a6e43737f7f4fba\" returns successfully" Oct 2 19:09:59.175098 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 2 19:09:59.175254 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 2 19:09:59.689675 kubelet[1412]: E1002 19:09:59.689615 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:09:59.938961 kubelet[1412]: E1002 19:09:59.938930 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:00.159714 kubelet[1412]: I1002 19:10:00.159587 1412 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-wkxzl" podStartSLOduration=-9.223372009695251e+09 pod.CreationTimestamp="2023-10-02 19:09:33 +0000 UTC" firstStartedPulling="2023-10-02 19:09:37.158576132 +0000 UTC m=+16.736555496" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:10:00.159363361 +0000 UTC m=+39.737342746" watchObservedRunningTime="2023-10-02 19:10:00.159524382 +0000 UTC m=+39.737503746" Oct 2 19:10:00.663222 kubelet[1412]: E1002 19:10:00.663182 1412 file.go:104] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:00.690518 kubelet[1412]: E1002 19:10:00.690459 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:00.941326 kubelet[1412]: E1002 19:10:00.941148 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:01.011847 update_engine[1098]: I1002 19:10:01.011737 1098 update_attempter.cc:505] Updating boot flags... Oct 2 19:10:01.304000 audit[2509]: AVC avc: denied { write } for pid=2509 comm="tee" name="fd" dev="proc" ino=19406 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:10:01.304000 audit[2509]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdc2bcc98d a2=241 a3=1b6 items=1 ppid=2483 pid=2509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.304000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 2 19:10:01.304000 audit: PATH item=0 name="/dev/fd/63" inode=19398 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:01.304000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:10:01.320000 audit[2514]: AVC avc: denied { write } for pid=2514 comm="tee" name="fd" dev="proc" ino=21535 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:10:01.320000 audit[2514]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffebb7e298c a2=241 a3=1b6 items=1 ppid=2492 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.320000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 2 19:10:01.320000 audit: PATH item=0 name="/dev/fd/63" inode=19410 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:01.320000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:10:01.361000 audit[2531]: AVC avc: denied { write } for pid=2531 comm="tee" name="fd" dev="proc" ino=21550 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:10:01.361000 audit[2531]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffd622e97b a2=241 a3=1b6 items=1 ppid=2499 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.361000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 2 19:10:01.361000 audit: PATH item=0 name="/dev/fd/63" inode=21547 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:01.361000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:10:01.470000 audit[2542]: AVC avc: denied { write } for pid=2542 comm="tee" name="fd" dev="proc" ino=21567 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:10:01.470000 audit[2542]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff1d18b98b a2=241 a3=1b6 items=1 ppid=2487 pid=2542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.470000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 2 19:10:01.470000 audit: PATH item=0 name="/dev/fd/63" inode=21561 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:01.470000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:10:01.473000 audit[2544]: AVC avc: denied { write } for pid=2544 comm="tee" name="fd" dev="proc" ino=21571 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:10:01.473000 audit[2544]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc7626f98b a2=241 a3=1b6 items=1 ppid=2484 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.473000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 2 19:10:01.473000 audit: PATH item=0 name="/dev/fd/63" inode=21564 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:01.473000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:10:01.492000 audit[2552]: AVC avc: denied { write } for pid=2552 comm="tee" name="fd" dev="proc" ino=21038 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:10:01.492000 audit[2552]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd39caa97c a2=241 a3=1b6 items=1 ppid=2479 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.492000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 2 19:10:01.492000 audit: PATH item=0 name="/dev/fd/63" inode=21576 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:01.492000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:10:01.564000 audit[2559]: AVC avc: denied { write } for pid=2559 comm="tee" name="fd" dev="proc" ino=21579 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:10:01.564000 audit[2559]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffec952e98b a2=241 a3=1b6 items=1 ppid=2491 pid=2559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.564000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 2 19:10:01.564000 audit: PATH item=0 name="/dev/fd/63" inode=21044 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:01.564000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:10:01.691200 kubelet[1412]: E1002 19:10:01.691124 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:01.816596 kernel: Initializing XFRM netlink socket Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit: BPF prog-id=95 op=LOAD Oct 2 19:10:01.952000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd0dd948c0 a2=70 a3=7f7d99bb3000 items=0 ppid=2488 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.952000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:10:01.952000 audit: BPF prog-id=95 op=UNLOAD Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit: BPF prog-id=96 op=LOAD Oct 2 19:10:01.952000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd0dd948c0 a2=70 a3=6e items=0 ppid=2488 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.952000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:10:01.952000 audit: BPF prog-id=96 op=UNLOAD Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffd0dd94870 a2=70 a3=7ffd0dd948c0 items=0 ppid=2488 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.952000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit: BPF prog-id=97 op=LOAD Oct 2 19:10:01.952000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd0dd94850 a2=70 a3=7ffd0dd948c0 items=0 ppid=2488 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.952000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:10:01.952000 audit: BPF prog-id=97 op=UNLOAD Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd0dd94930 a2=70 a3=0 items=0 ppid=2488 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.952000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd0dd94920 a2=70 a3=0 items=0 ppid=2488 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.952000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:10:01.952000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.952000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffd0dd94960 a2=70 a3=0 items=0 ppid=2488 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.952000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:10:01.956000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.956000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.956000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.956000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.956000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.956000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.956000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.956000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.956000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.956000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.956000 audit: BPF prog-id=98 op=LOAD Oct 2 19:10:01.956000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd0dd94880 a2=70 a3=ffffffff items=0 ppid=2488 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.956000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:10:01.959000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.959000 audit[2651]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffcf772aba0 a2=70 a3=208 items=0 ppid=2488 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.959000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:10:01.960000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:01.960000 audit[2651]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffcf772aa70 a2=70 a3=3 items=0 ppid=2488 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:01.960000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:10:01.970000 audit: BPF prog-id=98 op=UNLOAD Oct 2 19:10:02.037000 audit[2672]: NETFILTER_CFG table=mangle:79 family=2 entries=19 op=nft_register_chain pid=2672 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:02.037000 audit[2672]: SYSCALL arch=c000003e syscall=46 success=yes exit=6800 a0=3 a1=7ffeca0412e0 a2=0 a3=7ffeca0412cc items=0 ppid=2488 pid=2672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:02.037000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:02.058000 audit[2674]: NETFILTER_CFG table=raw:80 family=2 entries=19 op=nft_register_chain pid=2674 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:02.058000 audit[2674]: SYSCALL arch=c000003e syscall=46 success=yes exit=6132 a0=3 a1=7ffe16f8a270 a2=0 a3=7ffe16f8a25c items=0 ppid=2488 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:02.058000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:02.064000 audit[2679]: NETFILTER_CFG table=nat:81 family=2 entries=16 op=nft_register_chain pid=2679 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:02.064000 audit[2679]: SYSCALL arch=c000003e syscall=46 success=yes exit=5188 a0=3 a1=7fff288763f0 a2=0 a3=7fff288763dc items=0 ppid=2488 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:02.064000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:02.064000 audit[2673]: NETFILTER_CFG table=filter:82 family=2 entries=39 op=nft_register_chain pid=2673 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:02.064000 audit[2673]: SYSCALL arch=c000003e syscall=46 success=yes exit=18472 a0=3 a1=7fff60e75d00 a2=0 a3=55db3a76b000 items=0 ppid=2488 pid=2673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:02.064000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:02.691725 kubelet[1412]: E1002 19:10:02.691649 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:02.827611 systemd-networkd[1004]: vxlan.calico: Link UP Oct 2 19:10:02.827619 systemd-networkd[1004]: vxlan.calico: Gained carrier Oct 2 19:10:03.692869 kubelet[1412]: E1002 19:10:03.692788 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:04.608792 systemd-networkd[1004]: vxlan.calico: Gained IPv6LL Oct 2 19:10:04.693068 kubelet[1412]: E1002 19:10:04.692979 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:04.857247 env[1104]: time="2023-10-02T19:10:04.857197059Z" level=info msg="StopPodSandbox for \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\"" Oct 2 19:10:05.007271 env[1104]: 2023-10-02 19:10:04.913 [INFO][2722] k8s.go 576: Cleaning up netns ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:05.007271 env[1104]: 2023-10-02 19:10:04.913 [INFO][2722] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" iface="eth0" netns="/var/run/netns/cni-c25d6a8b-1d99-d73c-613c-f946be541c0f" Oct 2 19:10:05.007271 env[1104]: 2023-10-02 19:10:04.914 [INFO][2722] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" iface="eth0" netns="/var/run/netns/cni-c25d6a8b-1d99-d73c-613c-f946be541c0f" Oct 2 19:10:05.007271 env[1104]: 2023-10-02 19:10:04.914 [INFO][2722] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" iface="eth0" netns="/var/run/netns/cni-c25d6a8b-1d99-d73c-613c-f946be541c0f" Oct 2 19:10:05.007271 env[1104]: 2023-10-02 19:10:04.914 [INFO][2722] k8s.go 583: Releasing IP address(es) ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:05.007271 env[1104]: 2023-10-02 19:10:04.914 [INFO][2722] utils.go 196: Calico CNI releasing IP address ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:05.007271 env[1104]: 2023-10-02 19:10:04.995 [INFO][2730] ipam_plugin.go 416: Releasing address using handleID ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" HandleID="k8s-pod-network.bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Workload="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:05.007271 env[1104]: time="2023-10-02T19:10:04Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:05.007271 env[1104]: time="2023-10-02T19:10:04Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:05.007271 env[1104]: 2023-10-02 19:10:05.002 [WARNING][2730] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" HandleID="k8s-pod-network.bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Workload="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:05.007271 env[1104]: 2023-10-02 19:10:05.002 [INFO][2730] ipam_plugin.go 444: Releasing address using workloadID ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" HandleID="k8s-pod-network.bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Workload="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:05.007271 env[1104]: time="2023-10-02T19:10:05Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:05.007271 env[1104]: 2023-10-02 19:10:05.005 [INFO][2722] k8s.go 589: Teardown processing complete. ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:05.007969 env[1104]: time="2023-10-02T19:10:05.007420945Z" level=info msg="TearDown network for sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\" successfully" Oct 2 19:10:05.007969 env[1104]: time="2023-10-02T19:10:05.007453869Z" level=info msg="StopPodSandbox for \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\" returns successfully" Oct 2 19:10:05.008045 kubelet[1412]: E1002 19:10:05.007897 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:05.008714 env[1104]: time="2023-10-02T19:10:05.008661612Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-6j29f,Uid:61f3d390-437c-4801-8ce5-42be206b3103,Namespace:kube-system,Attempt:1,}" Oct 2 19:10:05.009480 systemd[1]: run-netns-cni\x2dc25d6a8b\x2d1d99\x2dd73c\x2d613c\x2df946be541c0f.mount: Deactivated successfully. Oct 2 19:10:05.241811 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:10:05.242017 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic2101bfa926: link becomes ready Oct 2 19:10:05.254442 systemd-networkd[1004]: calic2101bfa926: Link UP Oct 2 19:10:05.254454 systemd-networkd[1004]: calic2101bfa926: Gained carrier Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.158 [INFO][2738] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0 coredns-787d4945fb- kube-system 61f3d390-437c-4801-8ce5-42be206b3103 900 0 2023-10-02 19:09:06 +0000 UTC map[k8s-app:kube-dns pod-template-hash:787d4945fb projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s 10.0.0.51 coredns-787d4945fb-6j29f eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calic2101bfa926 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" Namespace="kube-system" Pod="coredns-787d4945fb-6j29f" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--6j29f-" Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.158 [INFO][2738] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" Namespace="kube-system" Pod="coredns-787d4945fb-6j29f" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.193 [INFO][2753] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" HandleID="k8s-pod-network.a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" Workload="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.205 [INFO][2753] ipam_plugin.go 269: Auto assigning IP ContainerID="a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" HandleID="k8s-pod-network.a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" Workload="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003e8fb0), Attrs:map[string]string{"namespace":"kube-system", "node":"10.0.0.51", "pod":"coredns-787d4945fb-6j29f", "timestamp":"2023-10-02 19:10:05.193965161 +0000 UTC"}, Hostname:"10.0.0.51", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:10:05.266519 env[1104]: time="2023-10-02T19:10:05Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:05.266519 env[1104]: time="2023-10-02T19:10:05Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.205 [INFO][2753] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.51' Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.207 [INFO][2753] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" host="10.0.0.51" Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.210 [INFO][2753] ipam.go 372: Looking up existing affinities for host host="10.0.0.51" Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.215 [INFO][2753] ipam.go 489: Trying affinity for 192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.220 [INFO][2753] ipam.go 155: Attempting to load block cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.223 [INFO][2753] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.223 [INFO][2753] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.109.192/26 handle="k8s-pod-network.a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" host="10.0.0.51" Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.225 [INFO][2753] ipam.go 1682: Creating new handle: k8s-pod-network.a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.230 [INFO][2753] ipam.go 1203: Writing block in order to claim IPs block=192.168.109.192/26 handle="k8s-pod-network.a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" host="10.0.0.51" Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.235 [INFO][2753] ipam.go 1216: Successfully claimed IPs: [192.168.109.193/26] block=192.168.109.192/26 handle="k8s-pod-network.a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" host="10.0.0.51" Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.235 [INFO][2753] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.109.193/26] handle="k8s-pod-network.a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" host="10.0.0.51" Oct 2 19:10:05.266519 env[1104]: time="2023-10-02T19:10:05Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:05.266519 env[1104]: 2023-10-02 19:10:05.235 [INFO][2753] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.109.193/26] IPv6=[] ContainerID="a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" HandleID="k8s-pod-network.a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" Workload="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:05.267449 env[1104]: 2023-10-02 19:10:05.238 [INFO][2738] k8s.go 383: Populated endpoint ContainerID="a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" Namespace="kube-system" Pod="coredns-787d4945fb-6j29f" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"61f3d390-437c-4801-8ce5-42be206b3103", ResourceVersion:"900", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"", Pod:"coredns-787d4945fb-6j29f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic2101bfa926", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:05.267449 env[1104]: 2023-10-02 19:10:05.238 [INFO][2738] k8s.go 384: Calico CNI using IPs: [192.168.109.193/32] ContainerID="a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" Namespace="kube-system" Pod="coredns-787d4945fb-6j29f" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:05.267449 env[1104]: 2023-10-02 19:10:05.238 [INFO][2738] dataplane_linux.go 68: Setting the host side veth name to calic2101bfa926 ContainerID="a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" Namespace="kube-system" Pod="coredns-787d4945fb-6j29f" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:05.267449 env[1104]: 2023-10-02 19:10:05.241 [INFO][2738] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" Namespace="kube-system" Pod="coredns-787d4945fb-6j29f" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:05.267449 env[1104]: 2023-10-02 19:10:05.255 [INFO][2738] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" Namespace="kube-system" Pod="coredns-787d4945fb-6j29f" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"61f3d390-437c-4801-8ce5-42be206b3103", ResourceVersion:"900", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c", Pod:"coredns-787d4945fb-6j29f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic2101bfa926", MAC:"12:4a:8c:c6:11:d4", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:05.267449 env[1104]: 2023-10-02 19:10:05.262 [INFO][2738] k8s.go 489: Wrote updated endpoint to datastore ContainerID="a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c" Namespace="kube-system" Pod="coredns-787d4945fb-6j29f" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:05.280598 kernel: kauditd_printk_skb: 151 callbacks suppressed Oct 2 19:10:05.280758 kernel: audit: type=1325 audit(1696273805.277:727): table=filter:83 family=2 entries=36 op=nft_register_chain pid=2782 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:05.277000 audit[2782]: NETFILTER_CFG table=filter:83 family=2 entries=36 op=nft_register_chain pid=2782 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:05.277000 audit[2782]: SYSCALL arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7ffd90825fc0 a2=0 a3=7ffd90825fac items=0 ppid=2488 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:05.282378 env[1104]: time="2023-10-02T19:10:05.282227797Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:10:05.282378 env[1104]: time="2023-10-02T19:10:05.282286670Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:10:05.282378 env[1104]: time="2023-10-02T19:10:05.282315175Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:10:05.285668 env[1104]: time="2023-10-02T19:10:05.282591925Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c pid=2787 runtime=io.containerd.runc.v2 Oct 2 19:10:05.286847 kernel: audit: type=1300 audit(1696273805.277:727): arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7ffd90825fc0 a2=0 a3=7ffd90825fac items=0 ppid=2488 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:05.286920 kernel: audit: type=1327 audit(1696273805.277:727): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:05.277000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:05.307080 systemd[1]: Started cri-containerd-a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c.scope. Oct 2 19:10:05.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.324293 kernel: audit: type=1400 audit(1696273805.318:728): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.324373 kernel: audit: type=1400 audit(1696273805.318:729): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.324403 kernel: audit: type=1400 audit(1696273805.318:730): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.328680 kernel: audit: type=1400 audit(1696273805.318:731): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.328745 kernel: audit: type=1400 audit(1696273805.318:732): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.333037 kernel: audit: type=1400 audit(1696273805.318:733): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.333100 kernel: audit: type=1400 audit(1696273805.318:734): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit: BPF prog-id=99 op=LOAD Oct 2 19:10:05.323000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit[2797]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2787 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:05.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131333663343865343835653136323330353364353464303637376364 Oct 2 19:10:05.323000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit[2797]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2787 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:05.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131333663343865343835653136323330353364353464303637376364 Oct 2 19:10:05.323000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.323000 audit: BPF prog-id=100 op=LOAD Oct 2 19:10:05.323000 audit[2797]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003ca9c0 items=0 ppid=2787 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:05.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131333663343865343835653136323330353364353464303637376364 Oct 2 19:10:05.325000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.325000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.325000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.325000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.325000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.325000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.325000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.325000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.325000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.325000 audit: BPF prog-id=101 op=LOAD Oct 2 19:10:05.325000 audit[2797]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003caa08 items=0 ppid=2787 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:05.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131333663343865343835653136323330353364353464303637376364 Oct 2 19:10:05.330000 audit: BPF prog-id=101 op=UNLOAD Oct 2 19:10:05.330000 audit: BPF prog-id=100 op=UNLOAD Oct 2 19:10:05.330000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.330000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.330000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.330000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.330000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.330000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.330000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.330000 audit[2797]: AVC avc: denied { perfmon } for pid=2797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.330000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.330000 audit[2797]: AVC avc: denied { bpf } for pid=2797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:05.330000 audit: BPF prog-id=102 op=LOAD Oct 2 19:10:05.330000 audit[2797]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003cae18 items=0 ppid=2787 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:05.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131333663343865343835653136323330353364353464303637376364 Oct 2 19:10:05.335844 systemd-resolved[1053]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:10:05.361951 env[1104]: time="2023-10-02T19:10:05.361863529Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-6j29f,Uid:61f3d390-437c-4801-8ce5-42be206b3103,Namespace:kube-system,Attempt:1,} returns sandbox id \"a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c\"" Oct 2 19:10:05.363099 kubelet[1412]: E1002 19:10:05.362897 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:05.363838 env[1104]: time="2023-10-02T19:10:05.363799517Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:10:05.693941 kubelet[1412]: E1002 19:10:05.693773 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:05.852395 env[1104]: time="2023-10-02T19:10:05.852335385Z" level=info msg="StopPodSandbox for \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\"" Oct 2 19:10:05.952097 env[1104]: 2023-10-02 19:10:05.901 [INFO][2838] k8s.go 576: Cleaning up netns ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:05.952097 env[1104]: 2023-10-02 19:10:05.901 [INFO][2838] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" iface="eth0" netns="/var/run/netns/cni-d4e1fe1d-3be4-d5fc-f27d-5f720560d8ae" Oct 2 19:10:05.952097 env[1104]: 2023-10-02 19:10:05.901 [INFO][2838] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" iface="eth0" netns="/var/run/netns/cni-d4e1fe1d-3be4-d5fc-f27d-5f720560d8ae" Oct 2 19:10:05.952097 env[1104]: 2023-10-02 19:10:05.901 [INFO][2838] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" iface="eth0" netns="/var/run/netns/cni-d4e1fe1d-3be4-d5fc-f27d-5f720560d8ae" Oct 2 19:10:05.952097 env[1104]: 2023-10-02 19:10:05.901 [INFO][2838] k8s.go 583: Releasing IP address(es) ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:05.952097 env[1104]: 2023-10-02 19:10:05.901 [INFO][2838] utils.go 196: Calico CNI releasing IP address ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:05.952097 env[1104]: 2023-10-02 19:10:05.939 [INFO][2846] ipam_plugin.go 416: Releasing address using handleID ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" HandleID="k8s-pod-network.0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:05.952097 env[1104]: time="2023-10-02T19:10:05Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:05.952097 env[1104]: time="2023-10-02T19:10:05Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:05.952097 env[1104]: 2023-10-02 19:10:05.947 [WARNING][2846] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" HandleID="k8s-pod-network.0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:05.952097 env[1104]: 2023-10-02 19:10:05.947 [INFO][2846] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" HandleID="k8s-pod-network.0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:05.952097 env[1104]: time="2023-10-02T19:10:05Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:05.952097 env[1104]: 2023-10-02 19:10:05.950 [INFO][2838] k8s.go 589: Teardown processing complete. ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:05.952926 env[1104]: time="2023-10-02T19:10:05.952254599Z" level=info msg="TearDown network for sandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\" successfully" Oct 2 19:10:05.952926 env[1104]: time="2023-10-02T19:10:05.952299025Z" level=info msg="StopPodSandbox for \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\" returns successfully" Oct 2 19:10:05.952926 env[1104]: time="2023-10-02T19:10:05.952903132Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-t6pgk,Uid:d8cb181d-844b-47de-ac80-37f915850449,Namespace:calico-system,Attempt:1,}" Oct 2 19:10:06.010607 systemd[1]: run-netns-cni\x2dd4e1fe1d\x2d3be4\x2dd5fc\x2df27d\x2d5f720560d8ae.mount: Deactivated successfully. Oct 2 19:10:06.107597 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie580c0d9662: link becomes ready Oct 2 19:10:06.115893 systemd-networkd[1004]: calie580c0d9662: Link UP Oct 2 19:10:06.115902 systemd-networkd[1004]: calie580c0d9662: Gained carrier Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.013 [INFO][2854] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.51-k8s-csi--node--driver--t6pgk-eth0 csi-node-driver- calico-system d8cb181d-844b-47de-ac80-37f915850449 910 0 2023-10-02 19:09:52 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:5877dcb8f5 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s 10.0.0.51 csi-node-driver-t6pgk eth0 default [] [] [kns.calico-system ksa.calico-system.default] calie580c0d9662 [] []}} ContainerID="db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" Namespace="calico-system" Pod="csi-node-driver-t6pgk" WorkloadEndpoint="10.0.0.51-k8s-csi--node--driver--t6pgk-" Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.014 [INFO][2854] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" Namespace="calico-system" Pod="csi-node-driver-t6pgk" WorkloadEndpoint="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.038 [INFO][2867] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" HandleID="k8s-pod-network.db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.049 [INFO][2867] ipam_plugin.go 269: Auto assigning IP ContainerID="db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" HandleID="k8s-pod-network.db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000495210), Attrs:map[string]string{"namespace":"calico-system", "node":"10.0.0.51", "pod":"csi-node-driver-t6pgk", "timestamp":"2023-10-02 19:10:06.038854022 +0000 UTC"}, Hostname:"10.0.0.51", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:10:06.127394 env[1104]: time="2023-10-02T19:10:06Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:06.127394 env[1104]: time="2023-10-02T19:10:06Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.049 [INFO][2867] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.51' Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.051 [INFO][2867] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" host="10.0.0.51" Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.056 [INFO][2867] ipam.go 372: Looking up existing affinities for host host="10.0.0.51" Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.080 [INFO][2867] ipam.go 489: Trying affinity for 192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.083 [INFO][2867] ipam.go 155: Attempting to load block cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.086 [INFO][2867] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.086 [INFO][2867] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.109.192/26 handle="k8s-pod-network.db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" host="10.0.0.51" Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.088 [INFO][2867] ipam.go 1682: Creating new handle: k8s-pod-network.db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856 Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.095 [INFO][2867] ipam.go 1203: Writing block in order to claim IPs block=192.168.109.192/26 handle="k8s-pod-network.db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" host="10.0.0.51" Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.102 [INFO][2867] ipam.go 1216: Successfully claimed IPs: [192.168.109.194/26] block=192.168.109.192/26 handle="k8s-pod-network.db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" host="10.0.0.51" Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.102 [INFO][2867] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.109.194/26] handle="k8s-pod-network.db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" host="10.0.0.51" Oct 2 19:10:06.127394 env[1104]: time="2023-10-02T19:10:06Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:06.127394 env[1104]: 2023-10-02 19:10:06.102 [INFO][2867] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.109.194/26] IPv6=[] ContainerID="db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" HandleID="k8s-pod-network.db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:06.128157 env[1104]: 2023-10-02 19:10:06.104 [INFO][2854] k8s.go 383: Populated endpoint ContainerID="db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" Namespace="calico-system" Pod="csi-node-driver-t6pgk" WorkloadEndpoint="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-csi--node--driver--t6pgk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d8cb181d-844b-47de-ac80-37f915850449", ResourceVersion:"910", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"", Pod:"csi-node-driver-t6pgk", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calie580c0d9662", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:06.128157 env[1104]: 2023-10-02 19:10:06.105 [INFO][2854] k8s.go 384: Calico CNI using IPs: [192.168.109.194/32] ContainerID="db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" Namespace="calico-system" Pod="csi-node-driver-t6pgk" WorkloadEndpoint="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:06.128157 env[1104]: 2023-10-02 19:10:06.105 [INFO][2854] dataplane_linux.go 68: Setting the host side veth name to calie580c0d9662 ContainerID="db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" Namespace="calico-system" Pod="csi-node-driver-t6pgk" WorkloadEndpoint="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:06.128157 env[1104]: 2023-10-02 19:10:06.107 [INFO][2854] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" Namespace="calico-system" Pod="csi-node-driver-t6pgk" WorkloadEndpoint="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:06.128157 env[1104]: 2023-10-02 19:10:06.116 [INFO][2854] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" Namespace="calico-system" Pod="csi-node-driver-t6pgk" WorkloadEndpoint="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-csi--node--driver--t6pgk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d8cb181d-844b-47de-ac80-37f915850449", ResourceVersion:"910", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856", Pod:"csi-node-driver-t6pgk", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calie580c0d9662", MAC:"2a:dd:f5:bd:df:a7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:06.128157 env[1104]: 2023-10-02 19:10:06.125 [INFO][2854] k8s.go 489: Wrote updated endpoint to datastore ContainerID="db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856" Namespace="calico-system" Pod="csi-node-driver-t6pgk" WorkloadEndpoint="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:06.140000 audit[2904]: NETFILTER_CFG table=filter:84 family=2 entries=40 op=nft_register_chain pid=2904 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:06.140000 audit[2904]: SYSCALL arch=c000003e syscall=46 success=yes exit=21096 a0=3 a1=7ffd17782500 a2=0 a3=7ffd177824ec items=0 ppid=2488 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:06.140000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:06.142480 env[1104]: time="2023-10-02T19:10:06.141407343Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:10:06.142480 env[1104]: time="2023-10-02T19:10:06.141445517Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:10:06.142480 env[1104]: time="2023-10-02T19:10:06.141459313Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:10:06.142480 env[1104]: time="2023-10-02T19:10:06.141638876Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856 pid=2903 runtime=io.containerd.runc.v2 Oct 2 19:10:06.158371 systemd[1]: Started cri-containerd-db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856.scope. Oct 2 19:10:06.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.209000 audit: BPF prog-id=103 op=LOAD Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2903 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:06.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462333663663366383936303438356162353066633166633562646163 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2903 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:06.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462333663663366383936303438356162353066633166633562646163 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit: BPF prog-id=104 op=LOAD Oct 2 19:10:06.211000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003c6780 items=0 ppid=2903 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:06.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462333663663366383936303438356162353066633166633562646163 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit: BPF prog-id=105 op=LOAD Oct 2 19:10:06.211000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003c67c8 items=0 ppid=2903 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:06.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462333663663366383936303438356162353066633166633562646163 Oct 2 19:10:06.211000 audit: BPF prog-id=105 op=UNLOAD Oct 2 19:10:06.211000 audit: BPF prog-id=104 op=UNLOAD Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:06.211000 audit: BPF prog-id=106 op=LOAD Oct 2 19:10:06.211000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c6bd8 items=0 ppid=2903 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:06.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462333663663366383936303438356162353066633166633562646163 Oct 2 19:10:06.214403 systemd-resolved[1053]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:10:06.230084 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount662406330.mount: Deactivated successfully. Oct 2 19:10:06.237446 env[1104]: time="2023-10-02T19:10:06.237393287Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-t6pgk,Uid:d8cb181d-844b-47de-ac80-37f915850449,Namespace:calico-system,Attempt:1,} returns sandbox id \"db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856\"" Oct 2 19:10:06.600385 kubelet[1412]: E1002 19:10:06.600343 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:06.694978 kubelet[1412]: E1002 19:10:06.694910 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:06.853295 env[1104]: time="2023-10-02T19:10:06.853006439Z" level=info msg="StopPodSandbox for \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\"" Oct 2 19:10:06.913352 systemd-networkd[1004]: calic2101bfa926: Gained IPv6LL Oct 2 19:10:06.935658 env[1104]: 2023-10-02 19:10:06.897 [INFO][2977] k8s.go 576: Cleaning up netns ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:06.935658 env[1104]: 2023-10-02 19:10:06.897 [INFO][2977] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" iface="eth0" netns="/var/run/netns/cni-c3234ac5-d9be-5747-ce9d-bcecfefca8d1" Oct 2 19:10:06.935658 env[1104]: 2023-10-02 19:10:06.897 [INFO][2977] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" iface="eth0" netns="/var/run/netns/cni-c3234ac5-d9be-5747-ce9d-bcecfefca8d1" Oct 2 19:10:06.935658 env[1104]: 2023-10-02 19:10:06.897 [INFO][2977] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" iface="eth0" netns="/var/run/netns/cni-c3234ac5-d9be-5747-ce9d-bcecfefca8d1" Oct 2 19:10:06.935658 env[1104]: 2023-10-02 19:10:06.897 [INFO][2977] k8s.go 583: Releasing IP address(es) ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:06.935658 env[1104]: 2023-10-02 19:10:06.897 [INFO][2977] utils.go 196: Calico CNI releasing IP address ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:06.935658 env[1104]: 2023-10-02 19:10:06.924 [INFO][2984] ipam_plugin.go 416: Releasing address using handleID ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:06.935658 env[1104]: time="2023-10-02T19:10:06Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:06.935658 env[1104]: time="2023-10-02T19:10:06Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:06.935658 env[1104]: 2023-10-02 19:10:06.931 [WARNING][2984] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:06.935658 env[1104]: 2023-10-02 19:10:06.932 [INFO][2984] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:06.935658 env[1104]: time="2023-10-02T19:10:06Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:06.935658 env[1104]: 2023-10-02 19:10:06.934 [INFO][2977] k8s.go 589: Teardown processing complete. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:06.936136 env[1104]: time="2023-10-02T19:10:06.935882685Z" level=info msg="TearDown network for sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\" successfully" Oct 2 19:10:06.936136 env[1104]: time="2023-10-02T19:10:06.935926990Z" level=info msg="StopPodSandbox for \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\" returns successfully" Oct 2 19:10:06.936812 env[1104]: time="2023-10-02T19:10:06.936787907Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-8p4pt,Uid:5cb0ae04-309b-4665-b95a-ccaa3ac7692d,Namespace:calico-system,Attempt:1,}" Oct 2 19:10:06.972587 env[1104]: time="2023-10-02T19:10:06.972510037Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:06.974681 env[1104]: time="2023-10-02T19:10:06.974651896Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:06.976024 env[1104]: time="2023-10-02T19:10:06.975993163Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:06.977331 env[1104]: time="2023-10-02T19:10:06.977299893Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:06.977891 env[1104]: time="2023-10-02T19:10:06.977867850Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:10:06.978482 env[1104]: time="2023-10-02T19:10:06.978464673Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:10:06.980491 env[1104]: time="2023-10-02T19:10:06.980460561Z" level=info msg="CreateContainer within sandbox \"a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:10:06.991695 env[1104]: time="2023-10-02T19:10:06.991654203Z" level=info msg="CreateContainer within sandbox \"a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"86645d6084206ba0005fcc50a587b0fc00cf3417878a21b73216ce06e20ce942\"" Oct 2 19:10:06.992259 env[1104]: time="2023-10-02T19:10:06.992213593Z" level=info msg="StartContainer for \"86645d6084206ba0005fcc50a587b0fc00cf3417878a21b73216ce06e20ce942\"" Oct 2 19:10:07.010366 systemd[1]: run-netns-cni\x2dc3234ac5\x2dd9be\x2d5747\x2dce9d\x2dbcecfefca8d1.mount: Deactivated successfully. Oct 2 19:10:07.016071 systemd[1]: Started cri-containerd-86645d6084206ba0005fcc50a587b0fc00cf3417878a21b73216ce06e20ce942.scope. Oct 2 19:10:07.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.065000 audit: BPF prog-id=107 op=LOAD Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2787 pid=3017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:07.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836363435643630383432303662613030303566636335306135383762 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2787 pid=3017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:07.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836363435643630383432303662613030303566636335306135383762 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit: BPF prog-id=108 op=LOAD Oct 2 19:10:07.066000 audit[3017]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c00039b500 items=0 ppid=2787 pid=3017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:07.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836363435643630383432303662613030303566636335306135383762 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit: BPF prog-id=109 op=LOAD Oct 2 19:10:07.066000 audit[3017]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c00039b548 items=0 ppid=2787 pid=3017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:07.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836363435643630383432303662613030303566636335306135383762 Oct 2 19:10:07.066000 audit: BPF prog-id=109 op=UNLOAD Oct 2 19:10:07.066000 audit: BPF prog-id=108 op=UNLOAD Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { perfmon } for pid=3017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit[3017]: AVC avc: denied { bpf } for pid=3017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.066000 audit: BPF prog-id=110 op=LOAD Oct 2 19:10:07.066000 audit[3017]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c00039b958 items=0 ppid=2787 pid=3017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:07.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836363435643630383432303662613030303566636335306135383762 Oct 2 19:10:07.087402 env[1104]: time="2023-10-02T19:10:07.087355834Z" level=info msg="StartContainer for \"86645d6084206ba0005fcc50a587b0fc00cf3417878a21b73216ce06e20ce942\" returns successfully" Oct 2 19:10:07.092170 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:10:07.092259 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1a29c9b8c28: link becomes ready Oct 2 19:10:07.129768 systemd-networkd[1004]: cali1a29c9b8c28: Link UP Oct 2 19:10:07.129777 systemd-networkd[1004]: cali1a29c9b8c28: Gained carrier Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:06.991 [INFO][2994] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0 calico-kube-controllers-69c848ddc6- calico-system 5cb0ae04-309b-4665-b95a-ccaa3ac7692d 922 0 2023-10-02 19:09:11 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:69c848ddc6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s 10.0.0.51 calico-kube-controllers-69c848ddc6-8p4pt eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali1a29c9b8c28 [] []}} ContainerID="29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-8p4pt" WorkloadEndpoint="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-" Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:06.991 [INFO][2994] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-8p4pt" WorkloadEndpoint="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.051 [INFO][3016] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" HandleID="k8s-pod-network.29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.062 [INFO][3016] ipam_plugin.go 269: Auto assigning IP ContainerID="29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" HandleID="k8s-pod-network.29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000493a90), Attrs:map[string]string{"namespace":"calico-system", "node":"10.0.0.51", "pod":"calico-kube-controllers-69c848ddc6-8p4pt", "timestamp":"2023-10-02 19:10:07.051068325 +0000 UTC"}, Hostname:"10.0.0.51", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:10:07.140998 env[1104]: time="2023-10-02T19:10:07Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:07.140998 env[1104]: time="2023-10-02T19:10:07Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.062 [INFO][3016] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.51' Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.064 [INFO][3016] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" host="10.0.0.51" Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.068 [INFO][3016] ipam.go 372: Looking up existing affinities for host host="10.0.0.51" Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.072 [INFO][3016] ipam.go 489: Trying affinity for 192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.074 [INFO][3016] ipam.go 155: Attempting to load block cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.076 [INFO][3016] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.076 [INFO][3016] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.109.192/26 handle="k8s-pod-network.29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" host="10.0.0.51" Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.078 [INFO][3016] ipam.go 1682: Creating new handle: k8s-pod-network.29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.081 [INFO][3016] ipam.go 1203: Writing block in order to claim IPs block=192.168.109.192/26 handle="k8s-pod-network.29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" host="10.0.0.51" Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.087 [INFO][3016] ipam.go 1216: Successfully claimed IPs: [192.168.109.195/26] block=192.168.109.192/26 handle="k8s-pod-network.29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" host="10.0.0.51" Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.087 [INFO][3016] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.109.195/26] handle="k8s-pod-network.29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" host="10.0.0.51" Oct 2 19:10:07.140998 env[1104]: time="2023-10-02T19:10:07Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:07.140998 env[1104]: 2023-10-02 19:10:07.087 [INFO][3016] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.109.195/26] IPv6=[] ContainerID="29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" HandleID="k8s-pod-network.29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:07.141729 env[1104]: 2023-10-02 19:10:07.089 [INFO][2994] k8s.go 383: Populated endpoint ContainerID="29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-8p4pt" WorkloadEndpoint="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"5cb0ae04-309b-4665-b95a-ccaa3ac7692d", ResourceVersion:"922", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"", Pod:"calico-kube-controllers-69c848ddc6-8p4pt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.109.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1a29c9b8c28", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:07.141729 env[1104]: 2023-10-02 19:10:07.089 [INFO][2994] k8s.go 384: Calico CNI using IPs: [192.168.109.195/32] ContainerID="29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-8p4pt" WorkloadEndpoint="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:07.141729 env[1104]: 2023-10-02 19:10:07.089 [INFO][2994] dataplane_linux.go 68: Setting the host side veth name to cali1a29c9b8c28 ContainerID="29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-8p4pt" WorkloadEndpoint="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:07.141729 env[1104]: 2023-10-02 19:10:07.092 [INFO][2994] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-8p4pt" WorkloadEndpoint="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:07.141729 env[1104]: 2023-10-02 19:10:07.130 [INFO][2994] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-8p4pt" WorkloadEndpoint="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"5cb0ae04-309b-4665-b95a-ccaa3ac7692d", ResourceVersion:"922", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b", Pod:"calico-kube-controllers-69c848ddc6-8p4pt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.109.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1a29c9b8c28", MAC:"72:12:d2:6f:f5:09", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:07.141729 env[1104]: 2023-10-02 19:10:07.136 [INFO][2994] k8s.go 489: Wrote updated endpoint to datastore ContainerID="29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-8p4pt" WorkloadEndpoint="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:07.153947 env[1104]: time="2023-10-02T19:10:07.153874654Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:10:07.154150 env[1104]: time="2023-10-02T19:10:07.154125493Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:10:07.154260 env[1104]: time="2023-10-02T19:10:07.154236776Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:10:07.154595 env[1104]: time="2023-10-02T19:10:07.154567578Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b pid=3077 runtime=io.containerd.runc.v2 Oct 2 19:10:07.157000 audit[3087]: NETFILTER_CFG table=filter:85 family=2 entries=38 op=nft_register_chain pid=3087 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:07.157000 audit[3087]: SYSCALL arch=c000003e syscall=46 success=yes exit=19508 a0=3 a1=7ffcdfecec00 a2=0 a3=7ffcdfecebec items=0 ppid=2488 pid=3087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:07.157000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:07.169806 systemd[1]: Started cri-containerd-29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b.scope. Oct 2 19:10:07.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.183000 audit: BPF prog-id=111 op=LOAD Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3077 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:07.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239333135616438326436663362393137346532623462323163663330 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3077 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:07.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239333135616438326436663362393137346532623462323163663330 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit: BPF prog-id=112 op=LOAD Oct 2 19:10:07.184000 audit[3088]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000096c90 items=0 ppid=3077 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:07.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239333135616438326436663362393137346532623462323163663330 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit: BPF prog-id=113 op=LOAD Oct 2 19:10:07.184000 audit[3088]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000096cd8 items=0 ppid=3077 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:07.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239333135616438326436663362393137346532623462323163663330 Oct 2 19:10:07.184000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:10:07.184000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { perfmon } for pid=3088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit[3088]: AVC avc: denied { bpf } for pid=3088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:07.184000 audit: BPF prog-id=114 op=LOAD Oct 2 19:10:07.184000 audit[3088]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000970e8 items=0 ppid=3077 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:07.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239333135616438326436663362393137346532623462323163663330 Oct 2 19:10:07.186783 systemd-resolved[1053]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:10:07.216500 env[1104]: time="2023-10-02T19:10:07.216455544Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-8p4pt,Uid:5cb0ae04-309b-4665-b95a-ccaa3ac7692d,Namespace:calico-system,Attempt:1,} returns sandbox id \"29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b\"" Oct 2 19:10:07.254162 env[1104]: time="2023-10-02T19:10:07.254083656Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:10:07.255248 env[1104]: time="2023-10-02T19:10:07.255207355Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:10:07.255565 kubelet[1412]: E1002 19:10:07.255507 1412 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:10:07.255789 kubelet[1412]: E1002 19:10:07.255588 1412 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:10:07.255976 kubelet[1412]: E1002 19:10:07.255894 1412 kuberuntime_manager.go:872] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-fm4b9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-t6pgk_calico-system(d8cb181d-844b-47de-ac80-37f915850449): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:10:07.259475 env[1104]: time="2023-10-02T19:10:07.259415199Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\"" Oct 2 19:10:07.695894 kubelet[1412]: E1002 19:10:07.695824 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:07.809360 systemd-networkd[1004]: calie580c0d9662: Gained IPv6LL Oct 2 19:10:07.855949 env[1104]: time="2023-10-02T19:10:07.852470419Z" level=info msg="StopPodSandbox for \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\"" Oct 2 19:10:07.926746 env[1104]: 2023-10-02 19:10:07.895 [INFO][3126] k8s.go 576: Cleaning up netns ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:07.926746 env[1104]: 2023-10-02 19:10:07.895 [INFO][3126] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" iface="eth0" netns="/var/run/netns/cni-adfd5301-17b1-7123-5797-a61765b3d4c7" Oct 2 19:10:07.926746 env[1104]: 2023-10-02 19:10:07.895 [INFO][3126] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" iface="eth0" netns="/var/run/netns/cni-adfd5301-17b1-7123-5797-a61765b3d4c7" Oct 2 19:10:07.926746 env[1104]: 2023-10-02 19:10:07.895 [INFO][3126] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" iface="eth0" netns="/var/run/netns/cni-adfd5301-17b1-7123-5797-a61765b3d4c7" Oct 2 19:10:07.926746 env[1104]: 2023-10-02 19:10:07.896 [INFO][3126] k8s.go 583: Releasing IP address(es) ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:07.926746 env[1104]: 2023-10-02 19:10:07.896 [INFO][3126] utils.go 196: Calico CNI releasing IP address ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:07.926746 env[1104]: 2023-10-02 19:10:07.916 [INFO][3134] ipam_plugin.go 416: Releasing address using handleID ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" HandleID="k8s-pod-network.6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:07.926746 env[1104]: time="2023-10-02T19:10:07Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:07.926746 env[1104]: time="2023-10-02T19:10:07Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:07.926746 env[1104]: 2023-10-02 19:10:07.923 [WARNING][3134] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" HandleID="k8s-pod-network.6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:07.926746 env[1104]: 2023-10-02 19:10:07.923 [INFO][3134] ipam_plugin.go 444: Releasing address using workloadID ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" HandleID="k8s-pod-network.6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:07.926746 env[1104]: time="2023-10-02T19:10:07Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:07.926746 env[1104]: 2023-10-02 19:10:07.925 [INFO][3126] k8s.go 589: Teardown processing complete. ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:07.927245 env[1104]: time="2023-10-02T19:10:07.926884423Z" level=info msg="TearDown network for sandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\" successfully" Oct 2 19:10:07.927245 env[1104]: time="2023-10-02T19:10:07.926924220Z" level=info msg="StopPodSandbox for \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\" returns successfully" Oct 2 19:10:07.927308 kubelet[1412]: E1002 19:10:07.927268 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:07.927726 env[1104]: time="2023-10-02T19:10:07.927688752Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-87ck8,Uid:ed16db42-82f4-4aab-9526-f9e38bea4f8d,Namespace:kube-system,Attempt:1,}" Oct 2 19:10:07.958737 kubelet[1412]: E1002 19:10:07.958602 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:07.970874 kubelet[1412]: I1002 19:10:07.970822 1412 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-787d4945fb-6j29f" podStartSLOduration=-9.223371974884e+09 pod.CreationTimestamp="2023-10-02 19:09:06 +0000 UTC" firstStartedPulling="2023-10-02 19:10:05.363488642 +0000 UTC m=+44.941468006" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:10:07.970439639 +0000 UTC m=+47.548419013" watchObservedRunningTime="2023-10-02 19:10:07.970774879 +0000 UTC m=+47.548754233" Oct 2 19:10:08.010305 systemd[1]: run-netns-cni\x2dadfd5301\x2d17b1\x2d7123\x2d5797\x2da61765b3d4c7.mount: Deactivated successfully. Oct 2 19:10:08.016000 audit[3179]: NETFILTER_CFG table=filter:86 family=2 entries=12 op=nft_register_rule pid=3179 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:08.016000 audit[3179]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffdde61a260 a2=0 a3=7ffdde61a24c items=0 ppid=1814 pid=3179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.016000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:08.016000 audit[3179]: NETFILTER_CFG table=nat:87 family=2 entries=30 op=nft_register_rule pid=3179 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:08.016000 audit[3179]: SYSCALL arch=c000003e syscall=46 success=yes exit=8836 a0=3 a1=7ffdde61a260 a2=0 a3=7ffdde61a24c items=0 ppid=1814 pid=3179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.016000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:08.055000 audit[3211]: NETFILTER_CFG table=filter:88 family=2 entries=9 op=nft_register_rule pid=3211 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:08.055000 audit[3211]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffc68256e00 a2=0 a3=7ffc68256dec items=0 ppid=1814 pid=3211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.055000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:08.057000 audit[3211]: NETFILTER_CFG table=nat:89 family=2 entries=51 op=nft_register_chain pid=3211 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:08.057000 audit[3211]: SYSCALL arch=c000003e syscall=46 success=yes exit=19324 a0=3 a1=7ffc68256e00 a2=0 a3=7ffc68256dec items=0 ppid=1814 pid=3211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.057000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:08.119080 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:10:08.119202 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0fcdfde8a29: link becomes ready Oct 2 19:10:08.125875 systemd-networkd[1004]: cali0fcdfde8a29: Link UP Oct 2 19:10:08.125884 systemd-networkd[1004]: cali0fcdfde8a29: Gained carrier Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:07.972 [INFO][3141] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0 coredns-787d4945fb- kube-system ed16db42-82f4-4aab-9526-f9e38bea4f8d 936 0 2023-10-02 19:09:06 +0000 UTC map[k8s-app:kube-dns pod-template-hash:787d4945fb projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s 10.0.0.51 coredns-787d4945fb-87ck8 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali0fcdfde8a29 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" Namespace="kube-system" Pod="coredns-787d4945fb-87ck8" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--87ck8-" Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:07.972 [INFO][3141] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" Namespace="kube-system" Pod="coredns-787d4945fb-87ck8" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.079 [INFO][3184] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" HandleID="k8s-pod-network.b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.089 [INFO][3184] ipam_plugin.go 269: Auto assigning IP ContainerID="b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" HandleID="k8s-pod-network.b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0004e8fc0), Attrs:map[string]string{"namespace":"kube-system", "node":"10.0.0.51", "pod":"coredns-787d4945fb-87ck8", "timestamp":"2023-10-02 19:10:08.079159027 +0000 UTC"}, Hostname:"10.0.0.51", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:10:08.135629 env[1104]: time="2023-10-02T19:10:08Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:08.135629 env[1104]: time="2023-10-02T19:10:08Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.089 [INFO][3184] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.51' Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.092 [INFO][3184] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" host="10.0.0.51" Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.097 [INFO][3184] ipam.go 372: Looking up existing affinities for host host="10.0.0.51" Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.102 [INFO][3184] ipam.go 489: Trying affinity for 192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.104 [INFO][3184] ipam.go 155: Attempting to load block cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.106 [INFO][3184] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.106 [INFO][3184] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.109.192/26 handle="k8s-pod-network.b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" host="10.0.0.51" Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.107 [INFO][3184] ipam.go 1682: Creating new handle: k8s-pod-network.b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.111 [INFO][3184] ipam.go 1203: Writing block in order to claim IPs block=192.168.109.192/26 handle="k8s-pod-network.b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" host="10.0.0.51" Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.114 [INFO][3184] ipam.go 1216: Successfully claimed IPs: [192.168.109.196/26] block=192.168.109.192/26 handle="k8s-pod-network.b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" host="10.0.0.51" Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.114 [INFO][3184] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.109.196/26] handle="k8s-pod-network.b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" host="10.0.0.51" Oct 2 19:10:08.135629 env[1104]: time="2023-10-02T19:10:08Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:08.135629 env[1104]: 2023-10-02 19:10:08.114 [INFO][3184] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.109.196/26] IPv6=[] ContainerID="b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" HandleID="k8s-pod-network.b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:08.136673 env[1104]: 2023-10-02 19:10:08.116 [INFO][3141] k8s.go 383: Populated endpoint ContainerID="b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" Namespace="kube-system" Pod="coredns-787d4945fb-87ck8" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"ed16db42-82f4-4aab-9526-f9e38bea4f8d", ResourceVersion:"936", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"", Pod:"coredns-787d4945fb-87ck8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0fcdfde8a29", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:08.136673 env[1104]: 2023-10-02 19:10:08.116 [INFO][3141] k8s.go 384: Calico CNI using IPs: [192.168.109.196/32] ContainerID="b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" Namespace="kube-system" Pod="coredns-787d4945fb-87ck8" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:08.136673 env[1104]: 2023-10-02 19:10:08.116 [INFO][3141] dataplane_linux.go 68: Setting the host side veth name to cali0fcdfde8a29 ContainerID="b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" Namespace="kube-system" Pod="coredns-787d4945fb-87ck8" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:08.136673 env[1104]: 2023-10-02 19:10:08.119 [INFO][3141] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" Namespace="kube-system" Pod="coredns-787d4945fb-87ck8" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:08.136673 env[1104]: 2023-10-02 19:10:08.125 [INFO][3141] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" Namespace="kube-system" Pod="coredns-787d4945fb-87ck8" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"ed16db42-82f4-4aab-9526-f9e38bea4f8d", ResourceVersion:"936", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a", Pod:"coredns-787d4945fb-87ck8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0fcdfde8a29", MAC:"3a:69:e2:0e:51:eb", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:08.136673 env[1104]: 2023-10-02 19:10:08.133 [INFO][3141] k8s.go 489: Wrote updated endpoint to datastore ContainerID="b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a" Namespace="kube-system" Pod="coredns-787d4945fb-87ck8" WorkloadEndpoint="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:08.147000 audit[3230]: NETFILTER_CFG table=filter:90 family=2 entries=38 op=nft_register_chain pid=3230 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:08.147000 audit[3230]: SYSCALL arch=c000003e syscall=46 success=yes exit=19088 a0=3 a1=7ffd7b236110 a2=0 a3=7ffd7b2360fc items=0 ppid=2488 pid=3230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.147000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:08.153330 env[1104]: time="2023-10-02T19:10:08.153260714Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:10:08.153330 env[1104]: time="2023-10-02T19:10:08.153300941Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:10:08.153486 env[1104]: time="2023-10-02T19:10:08.153311551Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:10:08.153486 env[1104]: time="2023-10-02T19:10:08.153447772Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a pid=3239 runtime=io.containerd.runc.v2 Oct 2 19:10:08.170107 systemd[1]: Started cri-containerd-b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a.scope. Oct 2 19:10:08.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.179000 audit: BPF prog-id=115 op=LOAD Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000217c48 a2=10 a3=1c items=0 ppid=3239 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236366164663863623164616539306439626333363261646339353738 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0002176b0 a2=3c a3=c items=0 ppid=3239 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236366164663863623164616539306439626333363261646339353738 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit: BPF prog-id=116 op=LOAD Oct 2 19:10:08.180000 audit[3248]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0002179d8 a2=78 a3=c000299240 items=0 ppid=3239 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236366164663863623164616539306439626333363261646339353738 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit: BPF prog-id=117 op=LOAD Oct 2 19:10:08.180000 audit[3248]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000217770 a2=78 a3=c000299288 items=0 ppid=3239 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236366164663863623164616539306439626333363261646339353738 Oct 2 19:10:08.180000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:10:08.180000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.180000 audit: BPF prog-id=118 op=LOAD Oct 2 19:10:08.180000 audit[3248]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000217c30 a2=78 a3=c000299698 items=0 ppid=3239 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236366164663863623164616539306439626333363261646339353738 Oct 2 19:10:08.182689 systemd-resolved[1053]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:10:08.210228 env[1104]: time="2023-10-02T19:10:08.210081900Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-87ck8,Uid:ed16db42-82f4-4aab-9526-f9e38bea4f8d,Namespace:kube-system,Attempt:1,} returns sandbox id \"b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a\"" Oct 2 19:10:08.210827 kubelet[1412]: E1002 19:10:08.210802 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:08.212778 env[1104]: time="2023-10-02T19:10:08.212722174Z" level=info msg="CreateContainer within sandbox \"b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:10:08.227000 env[1104]: time="2023-10-02T19:10:08.226909366Z" level=info msg="CreateContainer within sandbox \"b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"e651d294bcf06f9a90b2d37d458a947cdcff6cf91f00eaf052f1921c578298c4\"" Oct 2 19:10:08.227626 env[1104]: time="2023-10-02T19:10:08.227504172Z" level=info msg="StartContainer for \"e651d294bcf06f9a90b2d37d458a947cdcff6cf91f00eaf052f1921c578298c4\"" Oct 2 19:10:08.244257 systemd[1]: Started cri-containerd-e651d294bcf06f9a90b2d37d458a947cdcff6cf91f00eaf052f1921c578298c4.scope. Oct 2 19:10:08.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.257000 audit: BPF prog-id=119 op=LOAD Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3239 pid=3278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536353164323934626366303666396139306232643337643435386139 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3239 pid=3278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536353164323934626366303666396139306232643337643435386139 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit: BPF prog-id=120 op=LOAD Oct 2 19:10:08.258000 audit[3278]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003bd400 items=0 ppid=3239 pid=3278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536353164323934626366303666396139306232643337643435386139 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit: BPF prog-id=121 op=LOAD Oct 2 19:10:08.258000 audit[3278]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003bd448 items=0 ppid=3239 pid=3278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536353164323934626366303666396139306232643337643435386139 Oct 2 19:10:08.258000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:10:08.258000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { perfmon } for pid=3278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit[3278]: AVC avc: denied { bpf } for pid=3278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:08.258000 audit: BPF prog-id=122 op=LOAD Oct 2 19:10:08.258000 audit[3278]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003bd858 items=0 ppid=3239 pid=3278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:08.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536353164323934626366303666396139306232643337643435386139 Oct 2 19:10:08.277319 env[1104]: time="2023-10-02T19:10:08.277244191Z" level=info msg="StartContainer for \"e651d294bcf06f9a90b2d37d458a947cdcff6cf91f00eaf052f1921c578298c4\" returns successfully" Oct 2 19:10:08.640800 systemd-networkd[1004]: cali1a29c9b8c28: Gained IPv6LL Oct 2 19:10:08.696591 kubelet[1412]: E1002 19:10:08.696503 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:08.964630 kubelet[1412]: E1002 19:10:08.964489 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:08.964630 kubelet[1412]: E1002 19:10:08.964503 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:08.973508 kubelet[1412]: I1002 19:10:08.973466 1412 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-787d4945fb-87ck8" podStartSLOduration=62.973430114 pod.CreationTimestamp="2023-10-02 19:09:06 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:10:08.97306691 +0000 UTC m=+48.551046274" watchObservedRunningTime="2023-10-02 19:10:08.973430114 +0000 UTC m=+48.551409478" Oct 2 19:10:09.112000 audit[3335]: NETFILTER_CFG table=filter:91 family=2 entries=6 op=nft_register_rule pid=3335 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:09.112000 audit[3335]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7fff2acfcd10 a2=0 a3=7fff2acfccfc items=0 ppid=1814 pid=3335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:09.112000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:09.114000 audit[3335]: NETFILTER_CFG table=nat:92 family=2 entries=60 op=nft_register_rule pid=3335 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:09.114000 audit[3335]: SYSCALL arch=c000003e syscall=46 success=yes exit=19324 a0=3 a1=7fff2acfcd10 a2=0 a3=7fff2acfccfc items=0 ppid=1814 pid=3335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:09.114000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:09.409657 systemd-networkd[1004]: cali0fcdfde8a29: Gained IPv6LL Oct 2 19:10:09.697381 kubelet[1412]: E1002 19:10:09.697202 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:09.966369 kubelet[1412]: E1002 19:10:09.966232 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:09.966522 kubelet[1412]: E1002 19:10:09.966386 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:10.150000 audit[3369]: NETFILTER_CFG table=filter:93 family=2 entries=6 op=nft_register_rule pid=3369 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:10.150000 audit[3369]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffd039c8e80 a2=0 a3=7ffd039c8e6c items=0 ppid=1814 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:10.150000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:10.159000 audit[3369]: NETFILTER_CFG table=nat:94 family=2 entries=72 op=nft_register_chain pid=3369 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:10.159000 audit[3369]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffd039c8e80 a2=0 a3=7ffd039c8e6c items=0 ppid=1814 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:10.159000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:10.161643 env[1104]: time="2023-10-02T19:10:10.161588974Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:10.165143 env[1104]: time="2023-10-02T19:10:10.165068740Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e785d005ccc1ab22527a783835cf2741f6f5f385a8956144c661f8c23ae9d78,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:10.167072 env[1104]: time="2023-10-02T19:10:10.167041854Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:10.169173 env[1104]: time="2023-10-02T19:10:10.169128745Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:b764feb1777655aabce5988324b69b412d23e087436ee2414dff893a158fcdef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:10.170082 env[1104]: time="2023-10-02T19:10:10.170046385Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\" returns image reference \"sha256:5e785d005ccc1ab22527a783835cf2741f6f5f385a8956144c661f8c23ae9d78\"" Oct 2 19:10:10.170756 env[1104]: time="2023-10-02T19:10:10.170716653Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:10:10.172527 env[1104]: time="2023-10-02T19:10:10.172476390Z" level=info msg="CreateContainer within sandbox \"29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Oct 2 19:10:10.184092 env[1104]: time="2023-10-02T19:10:10.184017322Z" level=info msg="CreateContainer within sandbox \"29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"8c0a22b23edc8e30e043f2a7ec62ed89e22c4611e8b8b6c8ac57cca91788eb6d\"" Oct 2 19:10:10.184748 env[1104]: time="2023-10-02T19:10:10.184712649Z" level=info msg="StartContainer for \"8c0a22b23edc8e30e043f2a7ec62ed89e22c4611e8b8b6c8ac57cca91788eb6d\"" Oct 2 19:10:10.214847 systemd[1]: Started cri-containerd-8c0a22b23edc8e30e043f2a7ec62ed89e22c4611e8b8b6c8ac57cca91788eb6d.scope. Oct 2 19:10:10.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.224000 audit: BPF prog-id=123 op=LOAD Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3077 pid=3381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:10.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863306132326232336564633865333065303433663261376563363265 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=3077 pid=3381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:10.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863306132326232336564633865333065303433663261376563363265 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit: BPF prog-id=124 op=LOAD Oct 2 19:10:10.226000 audit[3381]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00015ff20 items=0 ppid=3077 pid=3381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:10.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863306132326232336564633865333065303433663261376563363265 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit: BPF prog-id=125 op=LOAD Oct 2 19:10:10.226000 audit[3381]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00015ff68 items=0 ppid=3077 pid=3381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:10.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863306132326232336564633865333065303433663261376563363265 Oct 2 19:10:10.226000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:10:10.226000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { perfmon } for pid=3381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit[3381]: AVC avc: denied { bpf } for pid=3381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:10.226000 audit: BPF prog-id=126 op=LOAD Oct 2 19:10:10.226000 audit[3381]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000396378 items=0 ppid=3077 pid=3381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:10.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863306132326232336564633865333065303433663261376563363265 Oct 2 19:10:10.255691 env[1104]: time="2023-10-02T19:10:10.255605669Z" level=info msg="StartContainer for \"8c0a22b23edc8e30e043f2a7ec62ed89e22c4611e8b8b6c8ac57cca91788eb6d\" returns successfully" Oct 2 19:10:10.403646 env[1104]: time="2023-10-02T19:10:10.403539845Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:10:10.404834 env[1104]: time="2023-10-02T19:10:10.404782986Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:10:10.405146 kubelet[1412]: E1002 19:10:10.405076 1412 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:10:10.405146 kubelet[1412]: E1002 19:10:10.405142 1412 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:10:10.405372 kubelet[1412]: E1002 19:10:10.405269 1412 kuberuntime_manager.go:872] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fm4b9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-t6pgk_calico-system(d8cb181d-844b-47de-ac80-37f915850449): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:10:10.405372 kubelet[1412]: E1002 19:10:10.405363 1412 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-t6pgk" podUID=d8cb181d-844b-47de-ac80-37f915850449 Oct 2 19:10:10.698317 kubelet[1412]: E1002 19:10:10.698230 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:10.852870 env[1104]: time="2023-10-02T19:10:10.852794722Z" level=info msg="StopPodSandbox for \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\"" Oct 2 19:10:10.935873 env[1104]: 2023-10-02 19:10:10.898 [INFO][3427] k8s.go 576: Cleaning up netns ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:10.935873 env[1104]: 2023-10-02 19:10:10.898 [INFO][3427] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" iface="eth0" netns="/var/run/netns/cni-f0eeab4f-90de-133a-0f93-17aedf2d2af6" Oct 2 19:10:10.935873 env[1104]: 2023-10-02 19:10:10.899 [INFO][3427] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" iface="eth0" netns="/var/run/netns/cni-f0eeab4f-90de-133a-0f93-17aedf2d2af6" Oct 2 19:10:10.935873 env[1104]: 2023-10-02 19:10:10.899 [INFO][3427] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" iface="eth0" netns="/var/run/netns/cni-f0eeab4f-90de-133a-0f93-17aedf2d2af6" Oct 2 19:10:10.935873 env[1104]: 2023-10-02 19:10:10.899 [INFO][3427] k8s.go 583: Releasing IP address(es) ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:10.935873 env[1104]: 2023-10-02 19:10:10.899 [INFO][3427] utils.go 196: Calico CNI releasing IP address ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:10.935873 env[1104]: 2023-10-02 19:10:10.923 [INFO][3435] ipam_plugin.go 416: Releasing address using handleID ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" HandleID="k8s-pod-network.4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:10.935873 env[1104]: time="2023-10-02T19:10:10Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:10.935873 env[1104]: time="2023-10-02T19:10:10Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:10.935873 env[1104]: 2023-10-02 19:10:10.931 [WARNING][3435] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" HandleID="k8s-pod-network.4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:10.935873 env[1104]: 2023-10-02 19:10:10.931 [INFO][3435] ipam_plugin.go 444: Releasing address using workloadID ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" HandleID="k8s-pod-network.4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:10.935873 env[1104]: time="2023-10-02T19:10:10Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:10.935873 env[1104]: 2023-10-02 19:10:10.934 [INFO][3427] k8s.go 589: Teardown processing complete. ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:10.937987 systemd[1]: run-netns-cni\x2df0eeab4f\x2d90de\x2d133a\x2d0f93\x2d17aedf2d2af6.mount: Deactivated successfully. Oct 2 19:10:10.938628 env[1104]: time="2023-10-02T19:10:10.938578985Z" level=info msg="TearDown network for sandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\" successfully" Oct 2 19:10:10.938628 env[1104]: time="2023-10-02T19:10:10.938627287Z" level=info msg="StopPodSandbox for \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\" returns successfully" Oct 2 19:10:10.939467 env[1104]: time="2023-10-02T19:10:10.939422133Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:nginx-deployment-8ffc5cf85-tfbhr,Uid:cc426a90-6f8a-4d10-915a-1d3b39a0fc73,Namespace:default,Attempt:1,}" Oct 2 19:10:10.970452 kubelet[1412]: E1002 19:10:10.969759 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:10.971402 kubelet[1412]: E1002 19:10:10.971382 1412 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-t6pgk" podUID=d8cb181d-844b-47de-ac80-37f915850449 Oct 2 19:10:10.984452 kubelet[1412]: I1002 19:10:10.984407 1412 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-69c848ddc6-8p4pt" podStartSLOduration=-9.223371976870419e+09 pod.CreationTimestamp="2023-10-02 19:09:11 +0000 UTC" firstStartedPulling="2023-10-02 19:10:07.217824361 +0000 UTC m=+46.795803725" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:10:10.982530286 +0000 UTC m=+50.560509660" watchObservedRunningTime="2023-10-02 19:10:10.984357932 +0000 UTC m=+50.562337296" Oct 2 19:10:11.062048 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:10:11.062220 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6078db0a57c: link becomes ready Oct 2 19:10:11.072470 systemd-networkd[1004]: cali6078db0a57c: Link UP Oct 2 19:10:11.072481 systemd-networkd[1004]: cali6078db0a57c: Gained carrier Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:10.992 [INFO][3443] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0 nginx-deployment-8ffc5cf85- default cc426a90-6f8a-4d10-915a-1d3b39a0fc73 986 0 2023-10-02 19:09:55 +0000 UTC map[app:nginx pod-template-hash:8ffc5cf85 projectcalico.org/namespace:default projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s 10.0.0.51 nginx-deployment-8ffc5cf85-tfbhr eth0 default [] [] [kns.default ksa.default.default] cali6078db0a57c [] []}} ContainerID="c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" Namespace="default" Pod="nginx-deployment-8ffc5cf85-tfbhr" WorkloadEndpoint="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-" Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:10.993 [INFO][3443] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" Namespace="default" Pod="nginx-deployment-8ffc5cf85-tfbhr" WorkloadEndpoint="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.024 [INFO][3480] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" HandleID="k8s-pod-network.c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.035 [INFO][3480] ipam_plugin.go 269: Auto assigning IP ContainerID="c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" HandleID="k8s-pod-network.c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0000c1700), Attrs:map[string]string{"namespace":"default", "node":"10.0.0.51", "pod":"nginx-deployment-8ffc5cf85-tfbhr", "timestamp":"2023-10-02 19:10:11.024778969 +0000 UTC"}, Hostname:"10.0.0.51", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:10:11.082160 env[1104]: time="2023-10-02T19:10:11Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:11.082160 env[1104]: time="2023-10-02T19:10:11Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.035 [INFO][3480] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.51' Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.038 [INFO][3480] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" host="10.0.0.51" Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.042 [INFO][3480] ipam.go 372: Looking up existing affinities for host host="10.0.0.51" Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.045 [INFO][3480] ipam.go 489: Trying affinity for 192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.047 [INFO][3480] ipam.go 155: Attempting to load block cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.049 [INFO][3480] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.049 [INFO][3480] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.109.192/26 handle="k8s-pod-network.c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" host="10.0.0.51" Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.050 [INFO][3480] ipam.go 1682: Creating new handle: k8s-pod-network.c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3 Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.053 [INFO][3480] ipam.go 1203: Writing block in order to claim IPs block=192.168.109.192/26 handle="k8s-pod-network.c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" host="10.0.0.51" Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.057 [INFO][3480] ipam.go 1216: Successfully claimed IPs: [192.168.109.197/26] block=192.168.109.192/26 handle="k8s-pod-network.c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" host="10.0.0.51" Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.058 [INFO][3480] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.109.197/26] handle="k8s-pod-network.c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" host="10.0.0.51" Oct 2 19:10:11.082160 env[1104]: time="2023-10-02T19:10:11Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:11.082160 env[1104]: 2023-10-02 19:10:11.058 [INFO][3480] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.109.197/26] IPv6=[] ContainerID="c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" HandleID="k8s-pod-network.c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:11.082889 env[1104]: 2023-10-02 19:10:11.059 [INFO][3443] k8s.go 383: Populated endpoint ContainerID="c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" Namespace="default" Pod="nginx-deployment-8ffc5cf85-tfbhr" WorkloadEndpoint="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0", GenerateName:"nginx-deployment-8ffc5cf85-", Namespace:"default", SelfLink:"", UID:"cc426a90-6f8a-4d10-915a-1d3b39a0fc73", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app":"nginx", "pod-template-hash":"8ffc5cf85", "projectcalico.org/namespace":"default", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"", Pod:"nginx-deployment-8ffc5cf85-tfbhr", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.default", "ksa.default.default"}, InterfaceName:"cali6078db0a57c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:11.082889 env[1104]: 2023-10-02 19:10:11.059 [INFO][3443] k8s.go 384: Calico CNI using IPs: [192.168.109.197/32] ContainerID="c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" Namespace="default" Pod="nginx-deployment-8ffc5cf85-tfbhr" WorkloadEndpoint="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:11.082889 env[1104]: 2023-10-02 19:10:11.059 [INFO][3443] dataplane_linux.go 68: Setting the host side veth name to cali6078db0a57c ContainerID="c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" Namespace="default" Pod="nginx-deployment-8ffc5cf85-tfbhr" WorkloadEndpoint="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:11.082889 env[1104]: 2023-10-02 19:10:11.062 [INFO][3443] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" Namespace="default" Pod="nginx-deployment-8ffc5cf85-tfbhr" WorkloadEndpoint="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:11.082889 env[1104]: 2023-10-02 19:10:11.072 [INFO][3443] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" Namespace="default" Pod="nginx-deployment-8ffc5cf85-tfbhr" WorkloadEndpoint="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0", GenerateName:"nginx-deployment-8ffc5cf85-", Namespace:"default", SelfLink:"", UID:"cc426a90-6f8a-4d10-915a-1d3b39a0fc73", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app":"nginx", "pod-template-hash":"8ffc5cf85", "projectcalico.org/namespace":"default", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3", Pod:"nginx-deployment-8ffc5cf85-tfbhr", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.default", "ksa.default.default"}, InterfaceName:"cali6078db0a57c", MAC:"86:10:64:58:9c:ad", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:11.082889 env[1104]: 2023-10-02 19:10:11.076 [INFO][3443] k8s.go 489: Wrote updated endpoint to datastore ContainerID="c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3" Namespace="default" Pod="nginx-deployment-8ffc5cf85-tfbhr" WorkloadEndpoint="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:11.092000 audit[3504]: NETFILTER_CFG table=filter:95 family=2 entries=52 op=nft_register_chain pid=3504 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:11.096784 kernel: kauditd_printk_skb: 425 callbacks suppressed Oct 2 19:10:11.096859 kernel: audit: type=1325 audit(1696273811.092:865): table=filter:95 family=2 entries=52 op=nft_register_chain pid=3504 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:11.096888 kernel: audit: type=1300 audit(1696273811.092:865): arch=c000003e syscall=46 success=yes exit=24628 a0=3 a1=7ffc0f260070 a2=0 a3=7ffc0f26005c items=0 ppid=2488 pid=3504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:11.092000 audit[3504]: SYSCALL arch=c000003e syscall=46 success=yes exit=24628 a0=3 a1=7ffc0f260070 a2=0 a3=7ffc0f26005c items=0 ppid=2488 pid=3504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:11.099535 kernel: audit: type=1327 audit(1696273811.092:865): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:11.092000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:11.133433 env[1104]: time="2023-10-02T19:10:11.133363476Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:10:11.133642 env[1104]: time="2023-10-02T19:10:11.133404985Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:10:11.133642 env[1104]: time="2023-10-02T19:10:11.133416767Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:10:11.133642 env[1104]: time="2023-10-02T19:10:11.133542177Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3 pid=3513 runtime=io.containerd.runc.v2 Oct 2 19:10:11.144134 systemd[1]: Started cri-containerd-c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3.scope. Oct 2 19:10:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.158603 kernel: audit: type=1400 audit(1696273811.153:866): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.158668 kernel: audit: type=1400 audit(1696273811.153:867): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.158702 kernel: audit: type=1400 audit(1696273811.153:868): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.160382 kernel: audit: type=1400 audit(1696273811.153:869): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.164039 kernel: audit: type=1400 audit(1696273811.153:870): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.164101 kernel: audit: type=1400 audit(1696273811.153:871): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.165754 kernel: audit: type=1400 audit(1696273811.153:872): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit: BPF prog-id=127 op=LOAD Oct 2 19:10:11.157000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit[3522]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00013dc48 a2=10 a3=1c items=0 ppid=3513 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:11.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330363935386331613062636564353262653639396664393862376661 Oct 2 19:10:11.157000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit[3522]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00013d6b0 a2=3c a3=c items=0 ppid=3513 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:11.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330363935386331613062636564353262653639396664393862376661 Oct 2 19:10:11.157000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.157000 audit: BPF prog-id=128 op=LOAD Oct 2 19:10:11.157000 audit[3522]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00013d9d8 a2=78 a3=c000306700 items=0 ppid=3513 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:11.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330363935386331613062636564353262653639396664393862376661 Oct 2 19:10:11.158000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.158000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.158000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.158000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.158000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.158000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.158000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.158000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.158000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.158000 audit: BPF prog-id=129 op=LOAD Oct 2 19:10:11.158000 audit[3522]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00013d770 a2=78 a3=c000306748 items=0 ppid=3513 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:11.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330363935386331613062636564353262653639396664393862376661 Oct 2 19:10:11.160000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:10:11.160000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:10:11.160000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.160000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.160000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.160000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.160000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.160000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.160000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.160000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.160000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.160000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:11.160000 audit: BPF prog-id=130 op=LOAD Oct 2 19:10:11.160000 audit[3522]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00013dc30 a2=78 a3=c000306b58 items=0 ppid=3513 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:11.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330363935386331613062636564353262653639396664393862376661 Oct 2 19:10:11.167761 systemd-resolved[1053]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:10:11.194350 env[1104]: time="2023-10-02T19:10:11.194302779Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:nginx-deployment-8ffc5cf85-tfbhr,Uid:cc426a90-6f8a-4d10-915a-1d3b39a0fc73,Namespace:default,Attempt:1,} returns sandbox id \"c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3\"" Oct 2 19:10:11.195732 env[1104]: time="2023-10-02T19:10:11.195707627Z" level=info msg="PullImage \"ghcr.io/flatcar/nginx:latest\"" Oct 2 19:10:11.698962 kubelet[1412]: E1002 19:10:11.698902 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:11.972913 kubelet[1412]: E1002 19:10:11.972793 1412 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:12.108432 kubelet[1412]: I1002 19:10:12.108377 1412 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:10:12.109000 audit[3574]: NETFILTER_CFG table=filter:96 family=2 entries=7 op=nft_register_rule pid=3574 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:12.109000 audit[3574]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffc9f064360 a2=0 a3=7ffc9f06434c items=0 ppid=1814 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.109000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:12.113126 systemd[1]: Created slice kubepods-besteffort-podc26310d1_ba9b_4b90_9580_a72c1ad5b505.slice. Oct 2 19:10:12.111000 audit[3574]: NETFILTER_CFG table=nat:97 family=2 entries=78 op=nft_register_rule pid=3574 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:12.111000 audit[3574]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffc9f064360 a2=0 a3=7ffc9f06434c items=0 ppid=1814 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.111000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:12.118430 kubelet[1412]: I1002 19:10:12.118409 1412 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:10:12.123738 systemd[1]: Created slice kubepods-besteffort-podd63184d1_3cf6_463c_88b0_ad6e157c27b0.slice. Oct 2 19:10:12.151000 audit[3600]: NETFILTER_CFG table=filter:98 family=2 entries=8 op=nft_register_rule pid=3600 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:12.151000 audit[3600]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7fffa7784040 a2=0 a3=7fffa778402c items=0 ppid=1814 pid=3600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.151000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:12.153000 audit[3600]: NETFILTER_CFG table=nat:99 family=2 entries=78 op=nft_register_rule pid=3600 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:12.153000 audit[3600]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7fffa7784040 a2=0 a3=7fffa778402c items=0 ppid=1814 pid=3600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.153000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:12.262215 kubelet[1412]: I1002 19:10:12.262168 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7nltc\" (UniqueName: \"kubernetes.io/projected/d63184d1-3cf6-463c-88b0-ad6e157c27b0-kube-api-access-7nltc\") pod \"calico-apiserver-797695675f-gsp8h\" (UID: \"d63184d1-3cf6-463c-88b0-ad6e157c27b0\") " pod="calico-apiserver/calico-apiserver-797695675f-gsp8h" Oct 2 19:10:12.262215 kubelet[1412]: I1002 19:10:12.262229 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ncbqc\" (UniqueName: \"kubernetes.io/projected/c26310d1-ba9b-4b90-9580-a72c1ad5b505-kube-api-access-ncbqc\") pod \"calico-apiserver-797695675f-szfvb\" (UID: \"c26310d1-ba9b-4b90-9580-a72c1ad5b505\") " pod="calico-apiserver/calico-apiserver-797695675f-szfvb" Oct 2 19:10:12.262470 kubelet[1412]: I1002 19:10:12.262411 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d63184d1-3cf6-463c-88b0-ad6e157c27b0-calico-apiserver-certs\") pod \"calico-apiserver-797695675f-gsp8h\" (UID: \"d63184d1-3cf6-463c-88b0-ad6e157c27b0\") " pod="calico-apiserver/calico-apiserver-797695675f-gsp8h" Oct 2 19:10:12.262530 kubelet[1412]: I1002 19:10:12.262512 1412 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/c26310d1-ba9b-4b90-9580-a72c1ad5b505-calico-apiserver-certs\") pod \"calico-apiserver-797695675f-szfvb\" (UID: \"c26310d1-ba9b-4b90-9580-a72c1ad5b505\") " pod="calico-apiserver/calico-apiserver-797695675f-szfvb" Oct 2 19:10:12.352752 systemd-networkd[1004]: cali6078db0a57c: Gained IPv6LL Oct 2 19:10:12.416603 env[1104]: time="2023-10-02T19:10:12.416535237Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-797695675f-szfvb,Uid:c26310d1-ba9b-4b90-9580-a72c1ad5b505,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:10:12.427167 env[1104]: time="2023-10-02T19:10:12.427126711Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-797695675f-gsp8h,Uid:d63184d1-3cf6-463c-88b0-ad6e157c27b0,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:10:12.540458 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:10:12.540754 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali84444816cf8: link becomes ready Oct 2 19:10:12.551616 systemd-networkd[1004]: cali84444816cf8: Link UP Oct 2 19:10:12.551626 systemd-networkd[1004]: cali84444816cf8: Gained carrier Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.468 [INFO][3609] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-eth0 calico-apiserver-797695675f- calico-apiserver c26310d1-ba9b-4b90-9580-a72c1ad5b505 1047 0 2023-10-02 19:10:12 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:797695675f projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s 10.0.0.51 calico-apiserver-797695675f-szfvb eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali84444816cf8 [] []}} ContainerID="0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-szfvb" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-" Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.469 [INFO][3609] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-szfvb" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-eth0" Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.501 [INFO][3631] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" HandleID="k8s-pod-network.0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" Workload="10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-eth0" Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.510 [INFO][3631] ipam_plugin.go 269: Auto assigning IP ContainerID="0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" HandleID="k8s-pod-network.0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" Workload="10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003e6570), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"10.0.0.51", "pod":"calico-apiserver-797695675f-szfvb", "timestamp":"2023-10-02 19:10:12.500999984 +0000 UTC"}, Hostname:"10.0.0.51", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:10:12.573701 env[1104]: time="2023-10-02T19:10:12Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:12.573701 env[1104]: time="2023-10-02T19:10:12Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.510 [INFO][3631] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.51' Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.512 [INFO][3631] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" host="10.0.0.51" Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.515 [INFO][3631] ipam.go 372: Looking up existing affinities for host host="10.0.0.51" Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.519 [INFO][3631] ipam.go 489: Trying affinity for 192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.523 [INFO][3631] ipam.go 155: Attempting to load block cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.525 [INFO][3631] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.525 [INFO][3631] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.109.192/26 handle="k8s-pod-network.0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" host="10.0.0.51" Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.527 [INFO][3631] ipam.go 1682: Creating new handle: k8s-pod-network.0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11 Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.530 [INFO][3631] ipam.go 1203: Writing block in order to claim IPs block=192.168.109.192/26 handle="k8s-pod-network.0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" host="10.0.0.51" Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.534 [INFO][3631] ipam.go 1216: Successfully claimed IPs: [192.168.109.198/26] block=192.168.109.192/26 handle="k8s-pod-network.0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" host="10.0.0.51" Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.534 [INFO][3631] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.109.198/26] handle="k8s-pod-network.0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" host="10.0.0.51" Oct 2 19:10:12.573701 env[1104]: time="2023-10-02T19:10:12Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:12.573701 env[1104]: 2023-10-02 19:10:12.534 [INFO][3631] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.109.198/26] IPv6=[] ContainerID="0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" HandleID="k8s-pod-network.0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" Workload="10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-eth0" Oct 2 19:10:12.574529 env[1104]: 2023-10-02 19:10:12.537 [INFO][3609] k8s.go 383: Populated endpoint ContainerID="0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-szfvb" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-eth0", GenerateName:"calico-apiserver-797695675f-", Namespace:"calico-apiserver", SelfLink:"", UID:"c26310d1-ba9b-4b90-9580-a72c1ad5b505", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 10, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"797695675f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"", Pod:"calico-apiserver-797695675f-szfvb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.109.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali84444816cf8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:12.574529 env[1104]: 2023-10-02 19:10:12.537 [INFO][3609] k8s.go 384: Calico CNI using IPs: [192.168.109.198/32] ContainerID="0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-szfvb" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-eth0" Oct 2 19:10:12.574529 env[1104]: 2023-10-02 19:10:12.537 [INFO][3609] dataplane_linux.go 68: Setting the host side veth name to cali84444816cf8 ContainerID="0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-szfvb" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-eth0" Oct 2 19:10:12.574529 env[1104]: 2023-10-02 19:10:12.540 [INFO][3609] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-szfvb" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-eth0" Oct 2 19:10:12.574529 env[1104]: 2023-10-02 19:10:12.552 [INFO][3609] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-szfvb" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-eth0", GenerateName:"calico-apiserver-797695675f-", Namespace:"calico-apiserver", SelfLink:"", UID:"c26310d1-ba9b-4b90-9580-a72c1ad5b505", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 10, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"797695675f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11", Pod:"calico-apiserver-797695675f-szfvb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.109.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali84444816cf8", MAC:"32:42:8c:d6:de:97", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:12.574529 env[1104]: 2023-10-02 19:10:12.570 [INFO][3609] k8s.go 489: Wrote updated endpoint to datastore ContainerID="0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-szfvb" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--szfvb-eth0" Oct 2 19:10:12.589693 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2aed9ab8906: link becomes ready Oct 2 19:10:12.589000 audit[3661]: NETFILTER_CFG table=filter:100 family=2 entries=63 op=nft_register_chain pid=3661 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:12.589000 audit[3661]: SYSCALL arch=c000003e syscall=46 success=yes exit=30480 a0=3 a1=7ffdb091eea0 a2=0 a3=7ffdb091ee8c items=0 ppid=2488 pid=3661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.589000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:12.599072 systemd-networkd[1004]: cali2aed9ab8906: Link UP Oct 2 19:10:12.599090 systemd-networkd[1004]: cali2aed9ab8906: Gained carrier Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.483 [INFO][3617] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0 calico-apiserver-797695675f- calico-apiserver d63184d1-3cf6-463c-88b0-ad6e157c27b0 1049 0 2023-10-02 19:10:12 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:797695675f projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s 10.0.0.51 calico-apiserver-797695675f-gsp8h eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali2aed9ab8906 [] []}} ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-gsp8h" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-" Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.483 [INFO][3617] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-gsp8h" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0" Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.517 [INFO][3639] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" HandleID="k8s-pod-network.f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Workload="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0" Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.527 [INFO][3639] ipam_plugin.go 269: Auto assigning IP ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" HandleID="k8s-pod-network.f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Workload="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002a3850), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"10.0.0.51", "pod":"calico-apiserver-797695675f-gsp8h", "timestamp":"2023-10-02 19:10:12.517868545 +0000 UTC"}, Hostname:"10.0.0.51", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:10:12.616132 env[1104]: time="2023-10-02T19:10:12Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:12.616132 env[1104]: time="2023-10-02T19:10:12Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.535 [INFO][3639] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.51' Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.537 [INFO][3639] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" host="10.0.0.51" Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.543 [INFO][3639] ipam.go 372: Looking up existing affinities for host host="10.0.0.51" Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.551 [INFO][3639] ipam.go 489: Trying affinity for 192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.555 [INFO][3639] ipam.go 155: Attempting to load block cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.560 [INFO][3639] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.109.192/26 host="10.0.0.51" Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.560 [INFO][3639] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.109.192/26 handle="k8s-pod-network.f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" host="10.0.0.51" Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.565 [INFO][3639] ipam.go 1682: Creating new handle: k8s-pod-network.f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2 Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.573 [INFO][3639] ipam.go 1203: Writing block in order to claim IPs block=192.168.109.192/26 handle="k8s-pod-network.f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" host="10.0.0.51" Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.582 [INFO][3639] ipam.go 1216: Successfully claimed IPs: [192.168.109.199/26] block=192.168.109.192/26 handle="k8s-pod-network.f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" host="10.0.0.51" Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.582 [INFO][3639] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.109.199/26] handle="k8s-pod-network.f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" host="10.0.0.51" Oct 2 19:10:12.616132 env[1104]: time="2023-10-02T19:10:12Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:12.616132 env[1104]: 2023-10-02 19:10:12.582 [INFO][3639] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.109.199/26] IPv6=[] ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" HandleID="k8s-pod-network.f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Workload="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0" Oct 2 19:10:12.617402 env[1104]: 2023-10-02 19:10:12.585 [INFO][3617] k8s.go 383: Populated endpoint ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-gsp8h" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0", GenerateName:"calico-apiserver-797695675f-", Namespace:"calico-apiserver", SelfLink:"", UID:"d63184d1-3cf6-463c-88b0-ad6e157c27b0", ResourceVersion:"1049", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 10, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"797695675f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"", Pod:"calico-apiserver-797695675f-gsp8h", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.109.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2aed9ab8906", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:12.617402 env[1104]: 2023-10-02 19:10:12.585 [INFO][3617] k8s.go 384: Calico CNI using IPs: [192.168.109.199/32] ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-gsp8h" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0" Oct 2 19:10:12.617402 env[1104]: 2023-10-02 19:10:12.585 [INFO][3617] dataplane_linux.go 68: Setting the host side veth name to cali2aed9ab8906 ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-gsp8h" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0" Oct 2 19:10:12.617402 env[1104]: 2023-10-02 19:10:12.589 [INFO][3617] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-gsp8h" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0" Oct 2 19:10:12.617402 env[1104]: 2023-10-02 19:10:12.599 [INFO][3617] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-gsp8h" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0", GenerateName:"calico-apiserver-797695675f-", Namespace:"calico-apiserver", SelfLink:"", UID:"d63184d1-3cf6-463c-88b0-ad6e157c27b0", ResourceVersion:"1049", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 10, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"797695675f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2", Pod:"calico-apiserver-797695675f-gsp8h", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.109.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2aed9ab8906", MAC:"62:89:b0:05:59:84", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:12.617402 env[1104]: 2023-10-02 19:10:12.608 [INFO][3617] k8s.go 489: Wrote updated endpoint to datastore ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Namespace="calico-apiserver" Pod="calico-apiserver-797695675f-gsp8h" WorkloadEndpoint="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0" Oct 2 19:10:12.629000 audit[3672]: NETFILTER_CFG table=filter:101 family=2 entries=54 op=nft_register_chain pid=3672 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:12.629000 audit[3672]: SYSCALL arch=c000003e syscall=46 success=yes exit=25684 a0=3 a1=7ffc2515c740 a2=0 a3=7ffc2515c72c items=0 ppid=2488 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.629000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:12.645802 env[1104]: time="2023-10-02T19:10:12.645378064Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:10:12.645802 env[1104]: time="2023-10-02T19:10:12.645428000Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:10:12.645802 env[1104]: time="2023-10-02T19:10:12.645437798Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:10:12.645802 env[1104]: time="2023-10-02T19:10:12.645602281Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11 pid=3683 runtime=io.containerd.runc.v2 Oct 2 19:10:12.668519 systemd[1]: Started cri-containerd-0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11.scope. Oct 2 19:10:12.677372 env[1104]: time="2023-10-02T19:10:12.673799130Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:10:12.677372 env[1104]: time="2023-10-02T19:10:12.673848956Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:10:12.677372 env[1104]: time="2023-10-02T19:10:12.673867831Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:10:12.677372 env[1104]: time="2023-10-02T19:10:12.674405315Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2 pid=3705 runtime=io.containerd.runc.v2 Oct 2 19:10:12.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.681000 audit: BPF prog-id=131 op=LOAD Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3683 pid=3707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063623966333464393665393538323130353864353833643366353132 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3683 pid=3707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063623966333464393665393538323130353864353833643366353132 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit: BPF prog-id=132 op=LOAD Oct 2 19:10:12.684000 audit[3707]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00029f620 items=0 ppid=3683 pid=3707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063623966333464393665393538323130353864353833643366353132 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.684000 audit: BPF prog-id=133 op=LOAD Oct 2 19:10:12.684000 audit[3707]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00029f668 items=0 ppid=3683 pid=3707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063623966333464393665393538323130353864353833643366353132 Oct 2 19:10:12.685000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:10:12.685000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:10:12.685000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.685000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.685000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.685000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.685000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.685000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.685000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.685000 audit[3707]: AVC avc: denied { perfmon } for pid=3707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.685000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.685000 audit[3707]: AVC avc: denied { bpf } for pid=3707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.685000 audit: BPF prog-id=134 op=LOAD Oct 2 19:10:12.685000 audit[3707]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c00029fa78 items=0 ppid=3683 pid=3707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063623966333464393665393538323130353864353833643366353132 Oct 2 19:10:12.686589 systemd-resolved[1053]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:10:12.698766 systemd[1]: Started cri-containerd-f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2.scope. Oct 2 19:10:12.700510 kubelet[1412]: E1002 19:10:12.699147 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:12.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.719000 audit: BPF prog-id=135 op=LOAD Oct 2 19:10:12.720000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.720000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3705 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631343561633839336633353566346436333864623962636364303831 Oct 2 19:10:12.720000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.720000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3705 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631343561633839336633353566346436333864623962636364303831 Oct 2 19:10:12.720000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.720000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.720000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.720000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.720000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.720000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.720000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.720000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.720000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.720000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.720000 audit: BPF prog-id=136 op=LOAD Oct 2 19:10:12.720000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001dc3f0 items=0 ppid=3705 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631343561633839336633353566346436333864623962636364303831 Oct 2 19:10:12.722000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.722000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.722000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.722000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.722000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.722000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.722000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.722000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.722000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.722000 audit: BPF prog-id=137 op=LOAD Oct 2 19:10:12.722000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001dc438 items=0 ppid=3705 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631343561633839336633353566346436333864623962636364303831 Oct 2 19:10:12.723000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:10:12.724000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:10:12.724000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.724000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.724000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.724000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.724000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.724000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.724000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.724000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.724000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.724000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:12.724000 audit: BPF prog-id=138 op=LOAD Oct 2 19:10:12.724000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001dc848 items=0 ppid=3705 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:12.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631343561633839336633353566346436333864623962636364303831 Oct 2 19:10:12.726625 systemd-resolved[1053]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:10:12.727344 env[1104]: time="2023-10-02T19:10:12.727271284Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-797695675f-szfvb,Uid:c26310d1-ba9b-4b90-9580-a72c1ad5b505,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"0cb9f34d96e95821058d583d3f5128121f35bb91f0a9a85891e0aa1bd08fee11\"" Oct 2 19:10:12.752929 env[1104]: time="2023-10-02T19:10:12.752869403Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-797695675f-gsp8h,Uid:d63184d1-3cf6-463c-88b0-ad6e157c27b0,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2\"" Oct 2 19:10:13.696769 systemd-networkd[1004]: cali84444816cf8: Gained IPv6LL Oct 2 19:10:13.700070 kubelet[1412]: E1002 19:10:13.700026 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:13.760713 systemd-networkd[1004]: cali2aed9ab8906: Gained IPv6LL Oct 2 19:10:14.700571 kubelet[1412]: E1002 19:10:14.700482 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:15.162751 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1231752813.mount: Deactivated successfully. Oct 2 19:10:15.700933 kubelet[1412]: E1002 19:10:15.700869 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:16.365650 env[1104]: time="2023-10-02T19:10:16.365581333Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/nginx:latest,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:16.367827 env[1104]: time="2023-10-02T19:10:16.367779701Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:22c2ef579d5668dbfa645a84c3a2e988885c114561e9a560a97b2d0ea6d6c988,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:16.369756 env[1104]: time="2023-10-02T19:10:16.369673972Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/nginx:latest,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:16.371283 env[1104]: time="2023-10-02T19:10:16.371250307Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/nginx@sha256:637f6b877b0a51c456b44ec74046864b5131a87cb1c4536f11170201073027cf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:16.372150 env[1104]: time="2023-10-02T19:10:16.372099421Z" level=info msg="PullImage \"ghcr.io/flatcar/nginx:latest\" returns image reference \"sha256:22c2ef579d5668dbfa645a84c3a2e988885c114561e9a560a97b2d0ea6d6c988\"" Oct 2 19:10:16.373618 env[1104]: time="2023-10-02T19:10:16.373569765Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:10:16.374651 env[1104]: time="2023-10-02T19:10:16.374613108Z" level=info msg="CreateContainer within sandbox \"c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3\" for container &ContainerMetadata{Name:nginx,Attempt:0,}" Oct 2 19:10:16.388898 env[1104]: time="2023-10-02T19:10:16.388827373Z" level=info msg="CreateContainer within sandbox \"c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3\" for &ContainerMetadata{Name:nginx,Attempt:0,} returns container id \"9844ca70bc8692bc18b057e1ba1e689def5de1a0d2646858605715f392d527a1\"" Oct 2 19:10:16.389718 env[1104]: time="2023-10-02T19:10:16.389670175Z" level=info msg="StartContainer for \"9844ca70bc8692bc18b057e1ba1e689def5de1a0d2646858605715f392d527a1\"" Oct 2 19:10:16.412258 systemd[1]: Started cri-containerd-9844ca70bc8692bc18b057e1ba1e689def5de1a0d2646858605715f392d527a1.scope. Oct 2 19:10:16.438602 kernel: kauditd_printk_skb: 182 callbacks suppressed Oct 2 19:10:16.438804 kernel: audit: type=1400 audit(1696273816.432:926): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.438852 kernel: audit: type=1400 audit(1696273816.432:927): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.442741 kernel: audit: type=1400 audit(1696273816.432:928): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.442804 kernel: audit: type=1400 audit(1696273816.432:929): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.449190 kernel: audit: type=1400 audit(1696273816.432:930): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.452383 kernel: audit: type=1400 audit(1696273816.432:931): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.452513 kernel: audit: type=1400 audit(1696273816.432:932): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.458094 kernel: audit: type=1400 audit(1696273816.432:933): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.458174 kernel: audit: type=1400 audit(1696273816.432:934): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.463451 kernel: audit: type=1400 audit(1696273816.432:935): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.432000 audit: BPF prog-id=139 op=LOAD Oct 2 19:10:16.434000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.434000 audit[3797]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3513 pid=3797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:16.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938343463613730626338363932626331386230353765316261316536 Oct 2 19:10:16.434000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.434000 audit[3797]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3513 pid=3797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:16.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938343463613730626338363932626331386230353765316261316536 Oct 2 19:10:16.434000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.434000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.434000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.434000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.434000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.434000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.434000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.434000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.434000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.434000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.434000 audit: BPF prog-id=140 op=LOAD Oct 2 19:10:16.434000 audit[3797]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003d2120 items=0 ppid=3513 pid=3797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:16.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938343463613730626338363932626331386230353765316261316536 Oct 2 19:10:16.442000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.442000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.442000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.442000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.442000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.442000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.442000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.442000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.442000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.442000 audit: BPF prog-id=141 op=LOAD Oct 2 19:10:16.442000 audit[3797]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003d2168 items=0 ppid=3513 pid=3797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:16.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938343463613730626338363932626331386230353765316261316536 Oct 2 19:10:16.448000 audit: BPF prog-id=141 op=UNLOAD Oct 2 19:10:16.448000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:10:16.448000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.448000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.448000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.448000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.448000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.448000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.448000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.448000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.448000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.448000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:16.448000 audit: BPF prog-id=142 op=LOAD Oct 2 19:10:16.448000 audit[3797]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d2578 items=0 ppid=3513 pid=3797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:16.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938343463613730626338363932626331386230353765316261316536 Oct 2 19:10:16.488755 env[1104]: time="2023-10-02T19:10:16.488663745Z" level=info msg="StartContainer for \"9844ca70bc8692bc18b057e1ba1e689def5de1a0d2646858605715f392d527a1\" returns successfully" Oct 2 19:10:16.657366 env[1104]: time="2023-10-02T19:10:16.657137233Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:10:16.658415 env[1104]: time="2023-10-02T19:10:16.658355508Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:10:16.658648 kubelet[1412]: E1002 19:10:16.658616 1412 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:10:16.658786 kubelet[1412]: E1002 19:10:16.658667 1412 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:10:16.658917 kubelet[1412]: E1002 19:10:16.658890 1412 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ncbqc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-797695675f-szfvb_calico-apiserver(c26310d1-ba9b-4b90-9580-a72c1ad5b505): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:10:16.659070 kubelet[1412]: E1002 19:10:16.658951 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-797695675f-szfvb" podUID=c26310d1-ba9b-4b90-9580-a72c1ad5b505 Oct 2 19:10:16.659395 env[1104]: time="2023-10-02T19:10:16.659333287Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:10:16.701198 kubelet[1412]: E1002 19:10:16.701138 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:16.898843 env[1104]: time="2023-10-02T19:10:16.898755997Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:10:16.899962 env[1104]: time="2023-10-02T19:10:16.899916973Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:10:16.900275 kubelet[1412]: E1002 19:10:16.900227 1412 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:10:16.900352 kubelet[1412]: E1002 19:10:16.900286 1412 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:10:16.900453 kubelet[1412]: E1002 19:10:16.900431 1412 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7nltc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-797695675f-gsp8h_calico-apiserver(d63184d1-3cf6-463c-88b0-ad6e157c27b0): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:10:16.900640 kubelet[1412]: E1002 19:10:16.900483 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-797695675f-gsp8h" podUID=d63184d1-3cf6-463c-88b0-ad6e157c27b0 Oct 2 19:10:16.988348 kubelet[1412]: E1002 19:10:16.988307 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-797695675f-szfvb" podUID=c26310d1-ba9b-4b90-9580-a72c1ad5b505 Oct 2 19:10:16.988348 kubelet[1412]: E1002 19:10:16.988317 1412 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-797695675f-gsp8h" podUID=d63184d1-3cf6-463c-88b0-ad6e157c27b0 Oct 2 19:10:17.013375 kubelet[1412]: I1002 19:10:17.013325 1412 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="default/nginx-deployment-8ffc5cf85-tfbhr" podStartSLOduration=-9.223372014841501e+09 pod.CreationTimestamp="2023-10-02 19:09:55 +0000 UTC" firstStartedPulling="2023-10-02 19:10:11.195374672 +0000 UTC m=+50.773354026" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:10:17.013176114 +0000 UTC m=+56.591155478" watchObservedRunningTime="2023-10-02 19:10:17.013275472 +0000 UTC m=+56.591254836" Oct 2 19:10:17.045000 audit[3895]: NETFILTER_CFG table=filter:102 family=2 entries=8 op=nft_register_rule pid=3895 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:17.045000 audit[3895]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffceb923a30 a2=0 a3=7ffceb923a1c items=0 ppid=1814 pid=3895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:17.045000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:17.047000 audit[3895]: NETFILTER_CFG table=nat:103 family=2 entries=78 op=nft_register_rule pid=3895 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:17.047000 audit[3895]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffceb923a30 a2=0 a3=7ffceb923a1c items=0 ppid=1814 pid=3895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:17.047000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:17.096000 audit[3921]: NETFILTER_CFG table=filter:104 family=2 entries=8 op=nft_register_rule pid=3921 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:17.096000 audit[3921]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffd98d77100 a2=0 a3=7ffd98d770ec items=0 ppid=1814 pid=3921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:17.096000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:17.099000 audit[3921]: NETFILTER_CFG table=nat:105 family=2 entries=78 op=nft_register_rule pid=3921 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:17.099000 audit[3921]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffd98d77100 a2=0 a3=7ffd98d770ec items=0 ppid=1814 pid=3921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:17.099000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:17.701505 kubelet[1412]: E1002 19:10:17.701413 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:18.702511 kubelet[1412]: E1002 19:10:18.702421 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:19.702768 kubelet[1412]: E1002 19:10:19.702650 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:20.663384 kubelet[1412]: E1002 19:10:20.663299 1412 file.go:104] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:20.672500 env[1104]: time="2023-10-02T19:10:20.672426544Z" level=info msg="StopPodSandbox for \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\"" Oct 2 19:10:20.703007 kubelet[1412]: E1002 19:10:20.702946 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:20.753045 env[1104]: 2023-10-02 19:10:20.719 [WARNING][3945] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0", GenerateName:"nginx-deployment-8ffc5cf85-", Namespace:"default", SelfLink:"", UID:"cc426a90-6f8a-4d10-915a-1d3b39a0fc73", ResourceVersion:"1089", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app":"nginx", "pod-template-hash":"8ffc5cf85", "projectcalico.org/namespace":"default", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3", Pod:"nginx-deployment-8ffc5cf85-tfbhr", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.default", "ksa.default.default"}, InterfaceName:"cali6078db0a57c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:20.753045 env[1104]: 2023-10-02 19:10:20.720 [INFO][3945] k8s.go 576: Cleaning up netns ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:20.753045 env[1104]: 2023-10-02 19:10:20.720 [INFO][3945] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" iface="eth0" netns="" Oct 2 19:10:20.753045 env[1104]: 2023-10-02 19:10:20.720 [INFO][3945] k8s.go 583: Releasing IP address(es) ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:20.753045 env[1104]: 2023-10-02 19:10:20.720 [INFO][3945] utils.go 196: Calico CNI releasing IP address ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:20.753045 env[1104]: 2023-10-02 19:10:20.740 [INFO][3953] ipam_plugin.go 416: Releasing address using handleID ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" HandleID="k8s-pod-network.4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:20.753045 env[1104]: time="2023-10-02T19:10:20Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:20.753045 env[1104]: time="2023-10-02T19:10:20Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:20.753045 env[1104]: 2023-10-02 19:10:20.748 [WARNING][3953] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" HandleID="k8s-pod-network.4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:20.753045 env[1104]: 2023-10-02 19:10:20.748 [INFO][3953] ipam_plugin.go 444: Releasing address using workloadID ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" HandleID="k8s-pod-network.4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:20.753045 env[1104]: time="2023-10-02T19:10:20Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:20.753045 env[1104]: 2023-10-02 19:10:20.751 [INFO][3945] k8s.go 589: Teardown processing complete. ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:20.753879 env[1104]: time="2023-10-02T19:10:20.753068730Z" level=info msg="TearDown network for sandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\" successfully" Oct 2 19:10:20.753879 env[1104]: time="2023-10-02T19:10:20.753105109Z" level=info msg="StopPodSandbox for \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\" returns successfully" Oct 2 19:10:20.753879 env[1104]: time="2023-10-02T19:10:20.753800729Z" level=info msg="RemovePodSandbox for \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\"" Oct 2 19:10:20.753964 env[1104]: time="2023-10-02T19:10:20.753854601Z" level=info msg="Forcibly stopping sandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\"" Oct 2 19:10:20.798867 kubelet[1412]: I1002 19:10:20.798788 1412 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:10:20.798867 kubelet[1412]: I1002 19:10:20.798859 1412 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:10:20.801245 env[1104]: time="2023-10-02T19:10:20.801176482Z" level=info msg="StopPodSandbox for \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\"" Oct 2 19:10:20.832116 env[1104]: 2023-10-02 19:10:20.793 [WARNING][3975] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0", GenerateName:"nginx-deployment-8ffc5cf85-", Namespace:"default", SelfLink:"", UID:"cc426a90-6f8a-4d10-915a-1d3b39a0fc73", ResourceVersion:"1089", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app":"nginx", "pod-template-hash":"8ffc5cf85", "projectcalico.org/namespace":"default", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3", Pod:"nginx-deployment-8ffc5cf85-tfbhr", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.default", "ksa.default.default"}, InterfaceName:"cali6078db0a57c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:20.832116 env[1104]: 2023-10-02 19:10:20.793 [INFO][3975] k8s.go 576: Cleaning up netns ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:20.832116 env[1104]: 2023-10-02 19:10:20.793 [INFO][3975] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" iface="eth0" netns="" Oct 2 19:10:20.832116 env[1104]: 2023-10-02 19:10:20.794 [INFO][3975] k8s.go 583: Releasing IP address(es) ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:20.832116 env[1104]: 2023-10-02 19:10:20.794 [INFO][3975] utils.go 196: Calico CNI releasing IP address ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:20.832116 env[1104]: 2023-10-02 19:10:20.820 [INFO][3982] ipam_plugin.go 416: Releasing address using handleID ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" HandleID="k8s-pod-network.4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:20.832116 env[1104]: time="2023-10-02T19:10:20Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:20.832116 env[1104]: time="2023-10-02T19:10:20Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:20.832116 env[1104]: 2023-10-02 19:10:20.827 [WARNING][3982] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" HandleID="k8s-pod-network.4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:20.832116 env[1104]: 2023-10-02 19:10:20.827 [INFO][3982] ipam_plugin.go 444: Releasing address using workloadID ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" HandleID="k8s-pod-network.4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:20.832116 env[1104]: time="2023-10-02T19:10:20Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:20.832116 env[1104]: 2023-10-02 19:10:20.830 [INFO][3975] k8s.go 589: Teardown processing complete. ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:20.832968 env[1104]: time="2023-10-02T19:10:20.832908616Z" level=info msg="TearDown network for sandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\" successfully" Oct 2 19:10:20.912481 env[1104]: time="2023-10-02T19:10:20.912408305Z" level=info msg="RemovePodSandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\" returns successfully" Oct 2 19:10:20.913189 env[1104]: time="2023-10-02T19:10:20.913145102Z" level=info msg="StopPodSandbox for \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\"" Oct 2 19:10:20.946570 env[1104]: 2023-10-02 19:10:20.909 [WARNING][4003] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0", GenerateName:"nginx-deployment-8ffc5cf85-", Namespace:"default", SelfLink:"", UID:"cc426a90-6f8a-4d10-915a-1d3b39a0fc73", ResourceVersion:"1089", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app":"nginx", "pod-template-hash":"8ffc5cf85", "projectcalico.org/namespace":"default", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"c06958c1a0bced52be699fd98b7fa24266f0f59d790af0e1b61a0a74df2b29c3", Pod:"nginx-deployment-8ffc5cf85-tfbhr", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.default", "ksa.default.default"}, InterfaceName:"cali6078db0a57c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:20.946570 env[1104]: 2023-10-02 19:10:20.909 [INFO][4003] k8s.go 576: Cleaning up netns ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:20.946570 env[1104]: 2023-10-02 19:10:20.909 [INFO][4003] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" iface="eth0" netns="" Oct 2 19:10:20.946570 env[1104]: 2023-10-02 19:10:20.909 [INFO][4003] k8s.go 583: Releasing IP address(es) ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:20.946570 env[1104]: 2023-10-02 19:10:20.909 [INFO][4003] utils.go 196: Calico CNI releasing IP address ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:20.946570 env[1104]: 2023-10-02 19:10:20.934 [INFO][4014] ipam_plugin.go 416: Releasing address using handleID ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" HandleID="k8s-pod-network.4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:20.946570 env[1104]: time="2023-10-02T19:10:20Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:20.946570 env[1104]: time="2023-10-02T19:10:20Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:20.946570 env[1104]: 2023-10-02 19:10:20.941 [WARNING][4014] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" HandleID="k8s-pod-network.4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:20.946570 env[1104]: 2023-10-02 19:10:20.941 [INFO][4014] ipam_plugin.go 444: Releasing address using workloadID ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" HandleID="k8s-pod-network.4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Workload="10.0.0.51-k8s-nginx--deployment--8ffc5cf85--tfbhr-eth0" Oct 2 19:10:20.946570 env[1104]: time="2023-10-02T19:10:20Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:20.946570 env[1104]: 2023-10-02 19:10:20.945 [INFO][4003] k8s.go 589: Teardown processing complete. ContainerID="4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503" Oct 2 19:10:20.947343 env[1104]: time="2023-10-02T19:10:20.946536123Z" level=info msg="TearDown network for sandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\" successfully" Oct 2 19:10:20.947343 env[1104]: time="2023-10-02T19:10:20.946594745Z" level=info msg="StopPodSandbox for \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\" returns successfully" Oct 2 19:10:20.948011 env[1104]: time="2023-10-02T19:10:20.947949124Z" level=info msg="RemovePodSandbox for \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\"" Oct 2 19:10:20.948011 env[1104]: time="2023-10-02T19:10:20.947996695Z" level=info msg="RemovePodSandbox \"4793ec2fc989e86d7816d511b330b51de6a8db705acc7d7054003a1995374503\" returns successfully" Oct 2 19:10:20.948563 env[1104]: time="2023-10-02T19:10:20.948490240Z" level=info msg="StopPodSandbox for \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\"" Oct 2 19:10:21.051140 env[1104]: 2023-10-02 19:10:20.996 [WARNING][4057] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"5cb0ae04-309b-4665-b95a-ccaa3ac7692d", ResourceVersion:"996", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b", Pod:"calico-kube-controllers-69c848ddc6-8p4pt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.109.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1a29c9b8c28", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:21.051140 env[1104]: 2023-10-02 19:10:20.997 [INFO][4057] k8s.go 576: Cleaning up netns ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.051140 env[1104]: 2023-10-02 19:10:20.997 [INFO][4057] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" iface="eth0" netns="" Oct 2 19:10:21.051140 env[1104]: 2023-10-02 19:10:20.997 [INFO][4057] k8s.go 583: Releasing IP address(es) ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.051140 env[1104]: 2023-10-02 19:10:20.997 [INFO][4057] utils.go 196: Calico CNI releasing IP address ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.051140 env[1104]: 2023-10-02 19:10:21.018 [INFO][4070] ipam_plugin.go 416: Releasing address using handleID ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:21.051140 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:21.051140 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:21.051140 env[1104]: 2023-10-02 19:10:21.045 [WARNING][4070] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:21.051140 env[1104]: 2023-10-02 19:10:21.045 [INFO][4070] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:21.051140 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:21.051140 env[1104]: 2023-10-02 19:10:21.049 [INFO][4057] k8s.go 589: Teardown processing complete. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.052047 env[1104]: time="2023-10-02T19:10:21.051953719Z" level=info msg="TearDown network for sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\" successfully" Oct 2 19:10:21.052047 env[1104]: time="2023-10-02T19:10:21.052017831Z" level=info msg="StopPodSandbox for \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\" returns successfully" Oct 2 19:10:21.052812 env[1104]: time="2023-10-02T19:10:21.052736865Z" level=info msg="RemovePodSandbox for \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\"" Oct 2 19:10:21.052881 env[1104]: time="2023-10-02T19:10:21.052806106Z" level=info msg="Forcibly stopping sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\"" Oct 2 19:10:21.060185 env[1104]: 2023-10-02 19:10:20.955 [WARNING][4033] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"5cb0ae04-309b-4665-b95a-ccaa3ac7692d", ResourceVersion:"996", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b", Pod:"calico-kube-controllers-69c848ddc6-8p4pt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.109.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1a29c9b8c28", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:21.060185 env[1104]: 2023-10-02 19:10:20.956 [INFO][4033] k8s.go 576: Cleaning up netns ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.060185 env[1104]: 2023-10-02 19:10:20.956 [INFO][4033] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" iface="eth0" netns="" Oct 2 19:10:21.060185 env[1104]: 2023-10-02 19:10:20.956 [INFO][4033] k8s.go 583: Releasing IP address(es) ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.060185 env[1104]: 2023-10-02 19:10:20.956 [INFO][4033] utils.go 196: Calico CNI releasing IP address ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.060185 env[1104]: 2023-10-02 19:10:21.037 [INFO][4058] ipam_plugin.go 416: Releasing address using handleID ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:21.060185 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:21.060185 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:21.060185 env[1104]: 2023-10-02 19:10:21.055 [WARNING][4058] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:21.060185 env[1104]: 2023-10-02 19:10:21.055 [INFO][4058] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:21.060185 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:21.060185 env[1104]: 2023-10-02 19:10:21.059 [INFO][4033] k8s.go 589: Teardown processing complete. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.060907 env[1104]: time="2023-10-02T19:10:21.060204327Z" level=info msg="TearDown network for sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\" successfully" Oct 2 19:10:21.060907 env[1104]: time="2023-10-02T19:10:21.060232380Z" level=info msg="StopPodSandbox for \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\" returns successfully" Oct 2 19:10:21.060907 env[1104]: time="2023-10-02T19:10:21.060847106Z" level=info msg="RemovePodSandbox for \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\"" Oct 2 19:10:21.061126 env[1104]: time="2023-10-02T19:10:21.060904996Z" level=info msg="Forcibly stopping sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\"" Oct 2 19:10:21.144168 env[1104]: 2023-10-02 19:10:21.102 [WARNING][4093] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"5cb0ae04-309b-4665-b95a-ccaa3ac7692d", ResourceVersion:"996", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b", Pod:"calico-kube-controllers-69c848ddc6-8p4pt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.109.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1a29c9b8c28", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:21.144168 env[1104]: 2023-10-02 19:10:21.103 [INFO][4093] k8s.go 576: Cleaning up netns ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.144168 env[1104]: 2023-10-02 19:10:21.104 [INFO][4093] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" iface="eth0" netns="" Oct 2 19:10:21.144168 env[1104]: 2023-10-02 19:10:21.104 [INFO][4093] k8s.go 583: Releasing IP address(es) ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.144168 env[1104]: 2023-10-02 19:10:21.104 [INFO][4093] utils.go 196: Calico CNI releasing IP address ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.144168 env[1104]: 2023-10-02 19:10:21.130 [INFO][4124] ipam_plugin.go 416: Releasing address using handleID ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:21.144168 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:21.144168 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:21.144168 env[1104]: 2023-10-02 19:10:21.139 [WARNING][4124] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:21.144168 env[1104]: 2023-10-02 19:10:21.139 [INFO][4124] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:21.144168 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:21.144168 env[1104]: 2023-10-02 19:10:21.142 [INFO][4093] k8s.go 589: Teardown processing complete. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.145004 env[1104]: time="2023-10-02T19:10:21.144191120Z" level=info msg="TearDown network for sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\" successfully" Oct 2 19:10:21.152541 env[1104]: 2023-10-02 19:10:21.105 [WARNING][4114] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"5cb0ae04-309b-4665-b95a-ccaa3ac7692d", ResourceVersion:"996", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"29315ad82d6f3b9174e2b4b21cf3085e72beb812311cd12f93ed8b78ea7d704b", Pod:"calico-kube-controllers-69c848ddc6-8p4pt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.109.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1a29c9b8c28", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:21.152541 env[1104]: 2023-10-02 19:10:21.105 [INFO][4114] k8s.go 576: Cleaning up netns ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.152541 env[1104]: 2023-10-02 19:10:21.105 [INFO][4114] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" iface="eth0" netns="" Oct 2 19:10:21.152541 env[1104]: 2023-10-02 19:10:21.105 [INFO][4114] k8s.go 583: Releasing IP address(es) ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.152541 env[1104]: 2023-10-02 19:10:21.105 [INFO][4114] utils.go 196: Calico CNI releasing IP address ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.152541 env[1104]: 2023-10-02 19:10:21.132 [INFO][4125] ipam_plugin.go 416: Releasing address using handleID ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:21.152541 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:21.152541 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:21.152541 env[1104]: 2023-10-02 19:10:21.148 [WARNING][4125] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:21.152541 env[1104]: 2023-10-02 19:10:21.148 [INFO][4125] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" HandleID="k8s-pod-network.0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Workload="10.0.0.51-k8s-calico--kube--controllers--69c848ddc6--8p4pt-eth0" Oct 2 19:10:21.152541 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:21.152541 env[1104]: 2023-10-02 19:10:21.151 [INFO][4114] k8s.go 589: Teardown processing complete. ContainerID="0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da" Oct 2 19:10:21.153199 env[1104]: time="2023-10-02T19:10:21.152656977Z" level=info msg="TearDown network for sandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\" successfully" Oct 2 19:10:21.316215 env[1104]: time="2023-10-02T19:10:21.316119428Z" level=info msg="RemovePodSandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\" returns successfully" Oct 2 19:10:21.316604 env[1104]: time="2023-10-02T19:10:21.316128435Z" level=info msg="RemovePodSandbox \"0379870b6b5c97f72b99088aaf52fde1ddaee153d3b9848f68ec5b868f13c9da\" returns successfully" Oct 2 19:10:21.317016 env[1104]: time="2023-10-02T19:10:21.316933923Z" level=info msg="StopPodSandbox for \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\"" Oct 2 19:10:21.317188 env[1104]: time="2023-10-02T19:10:21.317139643Z" level=info msg="StopPodSandbox for \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\"" Oct 2 19:10:21.404129 env[1104]: 2023-10-02 19:10:21.363 [WARNING][4169] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"61f3d390-437c-4801-8ce5-42be206b3103", ResourceVersion:"942", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c", Pod:"coredns-787d4945fb-6j29f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic2101bfa926", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:21.404129 env[1104]: 2023-10-02 19:10:21.363 [INFO][4169] k8s.go 576: Cleaning up netns ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:21.404129 env[1104]: 2023-10-02 19:10:21.363 [INFO][4169] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" iface="eth0" netns="" Oct 2 19:10:21.404129 env[1104]: 2023-10-02 19:10:21.363 [INFO][4169] k8s.go 583: Releasing IP address(es) ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:21.404129 env[1104]: 2023-10-02 19:10:21.364 [INFO][4169] utils.go 196: Calico CNI releasing IP address ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:21.404129 env[1104]: 2023-10-02 19:10:21.389 [INFO][4185] ipam_plugin.go 416: Releasing address using handleID ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" HandleID="k8s-pod-network.bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Workload="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:21.404129 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:21.404129 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:21.404129 env[1104]: 2023-10-02 19:10:21.398 [WARNING][4185] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" HandleID="k8s-pod-network.bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Workload="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:21.404129 env[1104]: 2023-10-02 19:10:21.398 [INFO][4185] ipam_plugin.go 444: Releasing address using workloadID ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" HandleID="k8s-pod-network.bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Workload="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:21.404129 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:21.404129 env[1104]: 2023-10-02 19:10:21.402 [INFO][4169] k8s.go 589: Teardown processing complete. ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:21.405007 env[1104]: time="2023-10-02T19:10:21.404163387Z" level=info msg="TearDown network for sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\" successfully" Oct 2 19:10:21.405007 env[1104]: time="2023-10-02T19:10:21.404206929Z" level=info msg="StopPodSandbox for \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\" returns successfully" Oct 2 19:10:21.405113 env[1104]: time="2023-10-02T19:10:21.405001035Z" level=info msg="RemovePodSandbox for \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\"" Oct 2 19:10:21.405199 env[1104]: time="2023-10-02T19:10:21.405126523Z" level=info msg="Forcibly stopping sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\"" Oct 2 19:10:21.441943 env[1104]: 2023-10-02 19:10:21.365 [WARNING][4164] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-csi--node--driver--t6pgk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d8cb181d-844b-47de-ac80-37f915850449", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856", Pod:"csi-node-driver-t6pgk", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calie580c0d9662", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:21.441943 env[1104]: 2023-10-02 19:10:21.365 [INFO][4164] k8s.go 576: Cleaning up netns ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:21.441943 env[1104]: 2023-10-02 19:10:21.366 [INFO][4164] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" iface="eth0" netns="" Oct 2 19:10:21.441943 env[1104]: 2023-10-02 19:10:21.366 [INFO][4164] k8s.go 583: Releasing IP address(es) ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:21.441943 env[1104]: 2023-10-02 19:10:21.366 [INFO][4164] utils.go 196: Calico CNI releasing IP address ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:21.441943 env[1104]: 2023-10-02 19:10:21.392 [INFO][4187] ipam_plugin.go 416: Releasing address using handleID ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" HandleID="k8s-pod-network.0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:21.441943 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:21.441943 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:21.441943 env[1104]: 2023-10-02 19:10:21.437 [WARNING][4187] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" HandleID="k8s-pod-network.0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:21.441943 env[1104]: 2023-10-02 19:10:21.437 [INFO][4187] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" HandleID="k8s-pod-network.0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:21.441943 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:21.441943 env[1104]: 2023-10-02 19:10:21.440 [INFO][4164] k8s.go 589: Teardown processing complete. ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:21.442500 env[1104]: time="2023-10-02T19:10:21.441993663Z" level=info msg="TearDown network for sandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\" successfully" Oct 2 19:10:21.442500 env[1104]: time="2023-10-02T19:10:21.442033148Z" level=info msg="StopPodSandbox for \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\" returns successfully" Oct 2 19:10:21.442652 env[1104]: time="2023-10-02T19:10:21.442604471Z" level=info msg="RemovePodSandbox for \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\"" Oct 2 19:10:21.442883 env[1104]: time="2023-10-02T19:10:21.442646100Z" level=info msg="Forcibly stopping sandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\"" Oct 2 19:10:21.486318 env[1104]: 2023-10-02 19:10:21.444 [WARNING][4214] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"61f3d390-437c-4801-8ce5-42be206b3103", ResourceVersion:"942", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"a136c48e485e1623053d54d0677cd6ee643e3c0c506de7403b5307a7aeb9ea7c", Pod:"coredns-787d4945fb-6j29f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic2101bfa926", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:21.486318 env[1104]: 2023-10-02 19:10:21.445 [INFO][4214] k8s.go 576: Cleaning up netns ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:21.486318 env[1104]: 2023-10-02 19:10:21.445 [INFO][4214] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" iface="eth0" netns="" Oct 2 19:10:21.486318 env[1104]: 2023-10-02 19:10:21.445 [INFO][4214] k8s.go 583: Releasing IP address(es) ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:21.486318 env[1104]: 2023-10-02 19:10:21.445 [INFO][4214] utils.go 196: Calico CNI releasing IP address ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:21.486318 env[1104]: 2023-10-02 19:10:21.468 [INFO][4227] ipam_plugin.go 416: Releasing address using handleID ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" HandleID="k8s-pod-network.bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Workload="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:21.486318 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:21.486318 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:21.486318 env[1104]: 2023-10-02 19:10:21.479 [WARNING][4227] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" HandleID="k8s-pod-network.bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Workload="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:21.486318 env[1104]: 2023-10-02 19:10:21.479 [INFO][4227] ipam_plugin.go 444: Releasing address using workloadID ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" HandleID="k8s-pod-network.bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Workload="10.0.0.51-k8s-coredns--787d4945fb--6j29f-eth0" Oct 2 19:10:21.486318 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:21.486318 env[1104]: 2023-10-02 19:10:21.483 [INFO][4214] k8s.go 589: Teardown processing complete. ContainerID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:21.487241 env[1104]: time="2023-10-02T19:10:21.486361738Z" level=info msg="TearDown network for sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\" successfully" Oct 2 19:10:21.519720 env[1104]: 2023-10-02 19:10:21.483 [WARNING][4242] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-csi--node--driver--t6pgk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d8cb181d-844b-47de-ac80-37f915850449", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856", Pod:"csi-node-driver-t6pgk", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calie580c0d9662", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:21.519720 env[1104]: 2023-10-02 19:10:21.483 [INFO][4242] k8s.go 576: Cleaning up netns ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:21.519720 env[1104]: 2023-10-02 19:10:21.483 [INFO][4242] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" iface="eth0" netns="" Oct 2 19:10:21.519720 env[1104]: 2023-10-02 19:10:21.484 [INFO][4242] k8s.go 583: Releasing IP address(es) ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:21.519720 env[1104]: 2023-10-02 19:10:21.484 [INFO][4242] utils.go 196: Calico CNI releasing IP address ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:21.519720 env[1104]: 2023-10-02 19:10:21.507 [INFO][4251] ipam_plugin.go 416: Releasing address using handleID ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" HandleID="k8s-pod-network.0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:21.519720 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:21.519720 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:21.519720 env[1104]: 2023-10-02 19:10:21.515 [WARNING][4251] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" HandleID="k8s-pod-network.0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:21.519720 env[1104]: 2023-10-02 19:10:21.515 [INFO][4251] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" HandleID="k8s-pod-network.0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:21.519720 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:21.519720 env[1104]: 2023-10-02 19:10:21.518 [INFO][4242] k8s.go 589: Teardown processing complete. ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:21.520626 env[1104]: time="2023-10-02T19:10:21.519758046Z" level=info msg="TearDown network for sandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\" successfully" Oct 2 19:10:21.703479 kubelet[1412]: E1002 19:10:21.703295 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:21.776737 env[1104]: time="2023-10-02T19:10:21.776636646Z" level=info msg="RemovePodSandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\" returns successfully" Oct 2 19:10:21.777326 env[1104]: time="2023-10-02T19:10:21.777296838Z" level=info msg="StopPodSandbox for \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\"" Oct 2 19:10:21.780144 env[1104]: time="2023-10-02T19:10:21.780104803Z" level=info msg="RemovePodSandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\" returns successfully" Oct 2 19:10:21.780630 env[1104]: time="2023-10-02T19:10:21.780584042Z" level=info msg="StopPodSandbox for \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\"" Oct 2 19:10:21.780739 env[1104]: time="2023-10-02T19:10:21.780636361Z" level=error msg="StopPodSandbox for \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\": not found" Oct 2 19:10:21.780931 kubelet[1412]: E1002 19:10:21.780908 1412 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\": not found" podSandboxID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:21.781013 kubelet[1412]: E1002 19:10:21.780950 1412 kuberuntime_gc.go:177] "Failed to stop sandbox before removing" err="rpc error: code = NotFound desc = an error occurred when try to find sandbox \"bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed\": not found" sandboxID="bede33503dbf702c37baab7b853923619bccc2cf47ff29d82d1b4616a5359aed" Oct 2 19:10:21.781174 env[1104]: time="2023-10-02T19:10:21.781147661Z" level=info msg="StopPodSandbox for \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\"" Oct 2 19:10:21.852296 env[1104]: 2023-10-02 19:10:21.813 [WARNING][4280] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-csi--node--driver--t6pgk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d8cb181d-844b-47de-ac80-37f915850449", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"db36cf3f8960485ab50fc1fc5bdac217f58aec8d469e6423e4a5e1458ec08856", Pod:"csi-node-driver-t6pgk", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calie580c0d9662", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:21.852296 env[1104]: 2023-10-02 19:10:21.813 [INFO][4280] k8s.go 576: Cleaning up netns ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:21.852296 env[1104]: 2023-10-02 19:10:21.813 [INFO][4280] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" iface="eth0" netns="" Oct 2 19:10:21.852296 env[1104]: 2023-10-02 19:10:21.813 [INFO][4280] k8s.go 583: Releasing IP address(es) ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:21.852296 env[1104]: 2023-10-02 19:10:21.813 [INFO][4280] utils.go 196: Calico CNI releasing IP address ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:21.852296 env[1104]: 2023-10-02 19:10:21.840 [INFO][4305] ipam_plugin.go 416: Releasing address using handleID ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" HandleID="k8s-pod-network.0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:21.852296 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:21.852296 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:21.852296 env[1104]: 2023-10-02 19:10:21.848 [WARNING][4305] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" HandleID="k8s-pod-network.0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:21.852296 env[1104]: 2023-10-02 19:10:21.848 [INFO][4305] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" HandleID="k8s-pod-network.0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Workload="10.0.0.51-k8s-csi--node--driver--t6pgk-eth0" Oct 2 19:10:21.852296 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:21.852296 env[1104]: 2023-10-02 19:10:21.851 [INFO][4280] k8s.go 589: Teardown processing complete. ContainerID="0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7" Oct 2 19:10:21.853244 env[1104]: time="2023-10-02T19:10:21.852346732Z" level=info msg="TearDown network for sandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\" successfully" Oct 2 19:10:21.853244 env[1104]: time="2023-10-02T19:10:21.852429249Z" level=info msg="StopPodSandbox for \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\" returns successfully" Oct 2 19:10:21.853244 env[1104]: time="2023-10-02T19:10:21.852937403Z" level=info msg="RemovePodSandbox for \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\"" Oct 2 19:10:21.853244 env[1104]: time="2023-10-02T19:10:21.852977508Z" level=info msg="RemovePodSandbox \"0c80b83d11437ec8befca735650ff0c01d5cd8ad74f8b09bf65af003ee7a5ab7\" returns successfully" Oct 2 19:10:21.853462 env[1104]: time="2023-10-02T19:10:21.853374472Z" level=info msg="StopPodSandbox for \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\"" Oct 2 19:10:21.854402 env[1104]: time="2023-10-02T19:10:21.854370580Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:10:21.866647 env[1104]: 2023-10-02 19:10:21.824 [WARNING][4296] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"ed16db42-82f4-4aab-9526-f9e38bea4f8d", ResourceVersion:"963", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a", Pod:"coredns-787d4945fb-87ck8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0fcdfde8a29", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:21.866647 env[1104]: 2023-10-02 19:10:21.824 [INFO][4296] k8s.go 576: Cleaning up netns ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:21.866647 env[1104]: 2023-10-02 19:10:21.825 [INFO][4296] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" iface="eth0" netns="" Oct 2 19:10:21.866647 env[1104]: 2023-10-02 19:10:21.825 [INFO][4296] k8s.go 583: Releasing IP address(es) ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:21.866647 env[1104]: 2023-10-02 19:10:21.825 [INFO][4296] utils.go 196: Calico CNI releasing IP address ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:21.866647 env[1104]: 2023-10-02 19:10:21.848 [INFO][4312] ipam_plugin.go 416: Releasing address using handleID ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" HandleID="k8s-pod-network.6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:21.866647 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:21.866647 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:21.866647 env[1104]: 2023-10-02 19:10:21.858 [WARNING][4312] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" HandleID="k8s-pod-network.6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:21.866647 env[1104]: 2023-10-02 19:10:21.858 [INFO][4312] ipam_plugin.go 444: Releasing address using workloadID ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" HandleID="k8s-pod-network.6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:21.866647 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:21.866647 env[1104]: 2023-10-02 19:10:21.863 [INFO][4296] k8s.go 589: Teardown processing complete. ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:21.867234 env[1104]: time="2023-10-02T19:10:21.866685987Z" level=info msg="TearDown network for sandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\" successfully" Oct 2 19:10:21.867234 env[1104]: time="2023-10-02T19:10:21.866739268Z" level=info msg="StopPodSandbox for \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\" returns successfully" Oct 2 19:10:21.868166 env[1104]: time="2023-10-02T19:10:21.868127030Z" level=info msg="RemovePodSandbox for \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\"" Oct 2 19:10:21.868250 env[1104]: time="2023-10-02T19:10:21.868173338Z" level=info msg="Forcibly stopping sandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\"" Oct 2 19:10:21.940910 env[1104]: 2023-10-02 19:10:21.906 [WARNING][4356] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"ed16db42-82f4-4aab-9526-f9e38bea4f8d", ResourceVersion:"963", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a", Pod:"coredns-787d4945fb-87ck8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0fcdfde8a29", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:21.940910 env[1104]: 2023-10-02 19:10:21.906 [INFO][4356] k8s.go 576: Cleaning up netns ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:21.940910 env[1104]: 2023-10-02 19:10:21.906 [INFO][4356] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" iface="eth0" netns="" Oct 2 19:10:21.940910 env[1104]: 2023-10-02 19:10:21.906 [INFO][4356] k8s.go 583: Releasing IP address(es) ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:21.940910 env[1104]: 2023-10-02 19:10:21.906 [INFO][4356] utils.go 196: Calico CNI releasing IP address ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:21.940910 env[1104]: 2023-10-02 19:10:21.931 [INFO][4369] ipam_plugin.go 416: Releasing address using handleID ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" HandleID="k8s-pod-network.6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:21.940910 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:21.940910 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:21.940910 env[1104]: 2023-10-02 19:10:21.937 [WARNING][4369] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" HandleID="k8s-pod-network.6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:21.940910 env[1104]: 2023-10-02 19:10:21.937 [INFO][4369] ipam_plugin.go 444: Releasing address using workloadID ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" HandleID="k8s-pod-network.6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:21.940910 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:21.940910 env[1104]: 2023-10-02 19:10:21.939 [INFO][4356] k8s.go 589: Teardown processing complete. ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:21.941530 env[1104]: time="2023-10-02T19:10:21.940938359Z" level=info msg="TearDown network for sandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\" successfully" Oct 2 19:10:21.944212 env[1104]: time="2023-10-02T19:10:21.944184586Z" level=info msg="RemovePodSandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\" returns successfully" Oct 2 19:10:21.950521 env[1104]: 2023-10-02 19:10:21.899 [WARNING][4335] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"ed16db42-82f4-4aab-9526-f9e38bea4f8d", ResourceVersion:"963", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 9, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.51", ContainerID:"b66adf8cb1dae90d9bc362adc957877ecf85e1575aa27579406139aef6347a7a", Pod:"coredns-787d4945fb-87ck8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0fcdfde8a29", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:10:21.950521 env[1104]: 2023-10-02 19:10:21.900 [INFO][4335] k8s.go 576: Cleaning up netns ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:21.950521 env[1104]: 2023-10-02 19:10:21.900 [INFO][4335] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" iface="eth0" netns="" Oct 2 19:10:21.950521 env[1104]: 2023-10-02 19:10:21.900 [INFO][4335] k8s.go 583: Releasing IP address(es) ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:21.950521 env[1104]: 2023-10-02 19:10:21.900 [INFO][4335] utils.go 196: Calico CNI releasing IP address ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:21.950521 env[1104]: 2023-10-02 19:10:21.932 [INFO][4364] ipam_plugin.go 416: Releasing address using handleID ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" HandleID="k8s-pod-network.6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:21.950521 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:21.950521 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:21.950521 env[1104]: 2023-10-02 19:10:21.946 [WARNING][4364] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" HandleID="k8s-pod-network.6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:21.950521 env[1104]: 2023-10-02 19:10:21.946 [INFO][4364] ipam_plugin.go 444: Releasing address using workloadID ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" HandleID="k8s-pod-network.6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Workload="10.0.0.51-k8s-coredns--787d4945fb--87ck8-eth0" Oct 2 19:10:21.950521 env[1104]: time="2023-10-02T19:10:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:21.950521 env[1104]: 2023-10-02 19:10:21.949 [INFO][4335] k8s.go 589: Teardown processing complete. ContainerID="6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700" Oct 2 19:10:21.950521 env[1104]: time="2023-10-02T19:10:21.950531994Z" level=info msg="TearDown network for sandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\" successfully" Oct 2 19:10:21.950521 env[1104]: time="2023-10-02T19:10:21.950574465Z" level=info msg="StopPodSandbox for \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\" returns successfully" Oct 2 19:10:21.951399 env[1104]: time="2023-10-02T19:10:21.951151840Z" level=info msg="RemovePodSandbox for \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\"" Oct 2 19:10:21.951399 env[1104]: time="2023-10-02T19:10:21.951184061Z" level=info msg="RemovePodSandbox \"6fa0320b3a27aa5b9d9bd3de67592b3135f67541599ee8758f6086e8fc992700\" returns successfully" Oct 2 19:10:21.951668 kubelet[1412]: I1002 19:10:21.951541 1412 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:10:21.967469 kubelet[1412]: I1002 19:10:21.967341 1412 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:10:21.967691 kubelet[1412]: I1002 19:10:21.967493 1412 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[calico-apiserver/calico-apiserver-797695675f-gsp8h calico-apiserver/calico-apiserver-797695675f-szfvb calico-system/csi-node-driver-t6pgk tigera-operator/tigera-operator-54b47459dd-582m7 default/nginx-deployment-8ffc5cf85-tfbhr kube-system/coredns-787d4945fb-87ck8 calico-system/calico-kube-controllers-69c848ddc6-8p4pt kube-system/coredns-787d4945fb-6j29f calico-system/calico-node-wkxzl kube-system/kube-proxy-p9fjw]" Oct 2 19:10:21.968058 env[1104]: time="2023-10-02T19:10:21.968020952Z" level=info msg="StopPodSandbox for \"f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2\"" Oct 2 19:10:21.970769 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2-shm.mount: Deactivated successfully. Oct 2 19:10:21.976193 systemd[1]: cri-containerd-f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2.scope: Deactivated successfully. Oct 2 19:10:21.976000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:10:21.978061 kernel: kauditd_printk_skb: 59 callbacks suppressed Oct 2 19:10:21.978152 kernel: audit: type=1334 audit(1696273821.976:948): prog-id=135 op=UNLOAD Oct 2 19:10:21.981000 audit: BPF prog-id=138 op=UNLOAD Oct 2 19:10:21.983570 kernel: audit: type=1334 audit(1696273821.981:949): prog-id=138 op=UNLOAD Oct 2 19:10:22.002181 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2-rootfs.mount: Deactivated successfully. Oct 2 19:10:22.025435 env[1104]: time="2023-10-02T19:10:22.025357498Z" level=info msg="shim disconnected" id=f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2 Oct 2 19:10:22.025435 env[1104]: time="2023-10-02T19:10:22.025408014Z" level=warning msg="cleaning up after shim disconnected" id=f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2 namespace=k8s.io Oct 2 19:10:22.025435 env[1104]: time="2023-10-02T19:10:22.025417632Z" level=info msg="cleaning up dead shim" Oct 2 19:10:22.033565 env[1104]: time="2023-10-02T19:10:22.033476421Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:10:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4399 runtime=io.containerd.runc.v2\n" Oct 2 19:10:22.083254 systemd-networkd[1004]: cali2aed9ab8906: Link DOWN Oct 2 19:10:22.083264 systemd-networkd[1004]: cali2aed9ab8906: Lost carrier Oct 2 19:10:22.104429 env[1104]: time="2023-10-02T19:10:22.104341662Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:10:22.105870 env[1104]: time="2023-10-02T19:10:22.105827940Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:10:22.106533 kubelet[1412]: E1002 19:10:22.106158 1412 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:10:22.106533 kubelet[1412]: E1002 19:10:22.106220 1412 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:10:22.106533 kubelet[1412]: E1002 19:10:22.106343 1412 kuberuntime_manager.go:872] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-fm4b9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-t6pgk_calico-system(d8cb181d-844b-47de-ac80-37f915850449): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:10:22.107865 env[1104]: time="2023-10-02T19:10:22.107827191Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:10:22.145384 env[1104]: 2023-10-02 19:10:22.080 [INFO][4427] k8s.go 576: Cleaning up netns ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Oct 2 19:10:22.145384 env[1104]: 2023-10-02 19:10:22.080 [INFO][4427] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" iface="eth0" netns="/var/run/netns/cni-0f3df59f-2fb5-b712-87cc-188b10ae7260" Oct 2 19:10:22.145384 env[1104]: 2023-10-02 19:10:22.081 [INFO][4427] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" iface="eth0" netns="/var/run/netns/cni-0f3df59f-2fb5-b712-87cc-188b10ae7260" Oct 2 19:10:22.145384 env[1104]: 2023-10-02 19:10:22.093 [INFO][4427] dataplane_linux.go 569: Deleted device in netns. ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" after=12.818312ms iface="eth0" netns="/var/run/netns/cni-0f3df59f-2fb5-b712-87cc-188b10ae7260" Oct 2 19:10:22.145384 env[1104]: 2023-10-02 19:10:22.093 [INFO][4427] k8s.go 583: Releasing IP address(es) ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Oct 2 19:10:22.145384 env[1104]: 2023-10-02 19:10:22.093 [INFO][4427] utils.go 196: Calico CNI releasing IP address ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Oct 2 19:10:22.145384 env[1104]: 2023-10-02 19:10:22.114 [INFO][4436] ipam_plugin.go 416: Releasing address using handleID ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" HandleID="k8s-pod-network.f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Workload="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0" Oct 2 19:10:22.145384 env[1104]: time="2023-10-02T19:10:22Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:10:22.145384 env[1104]: time="2023-10-02T19:10:22Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:10:22.145384 env[1104]: 2023-10-02 19:10:22.141 [INFO][4436] ipam_plugin.go 435: Released address using handleID ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" HandleID="k8s-pod-network.f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Workload="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0" Oct 2 19:10:22.145384 env[1104]: 2023-10-02 19:10:22.141 [INFO][4436] ipam_plugin.go 444: Releasing address using workloadID ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" HandleID="k8s-pod-network.f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Workload="10.0.0.51-k8s-calico--apiserver--797695675f--gsp8h-eth0" Oct 2 19:10:22.145384 env[1104]: time="2023-10-02T19:10:22Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:10:22.145384 env[1104]: 2023-10-02 19:10:22.143 [INFO][4427] k8s.go 589: Teardown processing complete. ContainerID="f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2" Oct 2 19:10:22.145946 env[1104]: time="2023-10-02T19:10:22.145541703Z" level=info msg="TearDown network for sandbox \"f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2\" successfully" Oct 2 19:10:22.145946 env[1104]: time="2023-10-02T19:10:22.145625802Z" level=info msg="StopPodSandbox for \"f145ac893f355f4d638db9bccd08167ba39811564481d4154e442bf5082f5af2\" returns successfully" Oct 2 19:10:22.147763 systemd[1]: run-netns-cni\x2d0f3df59f\x2d2fb5\x2db712\x2d87cc\x2d188b10ae7260.mount: Deactivated successfully. Oct 2 19:10:22.152343 kubelet[1412]: I1002 19:10:22.152320 1412 eviction_manager.go:595] "Eviction manager: pod is evicted successfully" pod="calico-apiserver/calico-apiserver-797695675f-gsp8h" Oct 2 19:10:22.152426 kubelet[1412]: I1002 19:10:22.152360 1412 eviction_manager.go:204] "Eviction manager: pods evicted, waiting for pod to be cleaned up" pods="[calico-apiserver/calico-apiserver-797695675f-gsp8h]" Oct 2 19:10:22.322118 kubelet[1412]: I1002 19:10:22.322061 1412 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d63184d1-3cf6-463c-88b0-ad6e157c27b0-calico-apiserver-certs\") pod \"d63184d1-3cf6-463c-88b0-ad6e157c27b0\" (UID: \"d63184d1-3cf6-463c-88b0-ad6e157c27b0\") " Oct 2 19:10:22.322118 kubelet[1412]: I1002 19:10:22.322129 1412 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-7nltc\" (UniqueName: \"kubernetes.io/projected/d63184d1-3cf6-463c-88b0-ad6e157c27b0-kube-api-access-7nltc\") pod \"d63184d1-3cf6-463c-88b0-ad6e157c27b0\" (UID: \"d63184d1-3cf6-463c-88b0-ad6e157c27b0\") " Oct 2 19:10:22.325374 kubelet[1412]: I1002 19:10:22.325326 1412 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d63184d1-3cf6-463c-88b0-ad6e157c27b0-kube-api-access-7nltc" (OuterVolumeSpecName: "kube-api-access-7nltc") pod "d63184d1-3cf6-463c-88b0-ad6e157c27b0" (UID: "d63184d1-3cf6-463c-88b0-ad6e157c27b0"). InnerVolumeSpecName "kube-api-access-7nltc". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:10:22.325569 kubelet[1412]: I1002 19:10:22.325454 1412 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d63184d1-3cf6-463c-88b0-ad6e157c27b0-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "d63184d1-3cf6-463c-88b0-ad6e157c27b0" (UID: "d63184d1-3cf6-463c-88b0-ad6e157c27b0"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:10:22.326408 systemd[1]: var-lib-kubelet-pods-d63184d1\x2d3cf6\x2d463c\x2d88b0\x2dad6e157c27b0-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d7nltc.mount: Deactivated successfully. Oct 2 19:10:22.326521 systemd[1]: var-lib-kubelet-pods-d63184d1\x2d3cf6\x2d463c\x2d88b0\x2dad6e157c27b0-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Oct 2 19:10:22.358666 env[1104]: time="2023-10-02T19:10:22.358594034Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:10:22.359849 env[1104]: time="2023-10-02T19:10:22.359812894Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:10:22.360051 kubelet[1412]: E1002 19:10:22.360024 1412 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:10:22.360117 kubelet[1412]: E1002 19:10:22.360061 1412 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:10:22.360209 kubelet[1412]: E1002 19:10:22.360156 1412 kuberuntime_manager.go:872] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fm4b9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-t6pgk_calico-system(d8cb181d-844b-47de-ac80-37f915850449): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:10:22.360500 kubelet[1412]: E1002 19:10:22.360239 1412 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-t6pgk" podUID=d8cb181d-844b-47de-ac80-37f915850449 Oct 2 19:10:22.422789 kubelet[1412]: I1002 19:10:22.422755 1412 reconciler_common.go:295] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d63184d1-3cf6-463c-88b0-ad6e157c27b0-calico-apiserver-certs\") on node \"10.0.0.51\" DevicePath \"\"" Oct 2 19:10:22.422789 kubelet[1412]: I1002 19:10:22.422784 1412 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-7nltc\" (UniqueName: \"kubernetes.io/projected/d63184d1-3cf6-463c-88b0-ad6e157c27b0-kube-api-access-7nltc\") on node \"10.0.0.51\" DevicePath \"\"" Oct 2 19:10:22.703678 kubelet[1412]: E1002 19:10:22.703492 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:22.862376 systemd[1]: Removed slice kubepods-besteffort-podd63184d1_3cf6_463c_88b0_ad6e157c27b0.slice. Oct 2 19:10:23.069000 audit[4494]: NETFILTER_CFG table=filter:106 family=2 entries=52 op=nft_register_rule pid=4494 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:23.069000 audit[4494]: SYSCALL arch=c000003e syscall=46 success=yes exit=8992 a0=3 a1=7ffd201d40b0 a2=0 a3=7ffd201d409c items=0 ppid=2488 pid=4494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:23.076129 kernel: audit: type=1325 audit(1696273823.069:950): table=filter:106 family=2 entries=52 op=nft_register_rule pid=4494 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:23.076392 kernel: audit: type=1300 audit(1696273823.069:950): arch=c000003e syscall=46 success=yes exit=8992 a0=3 a1=7ffd201d40b0 a2=0 a3=7ffd201d409c items=0 ppid=2488 pid=4494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:23.076423 kernel: audit: type=1327 audit(1696273823.069:950): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:23.069000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:23.069000 audit[4494]: NETFILTER_CFG table=filter:107 family=2 entries=2 op=nft_unregister_chain pid=4494 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:23.079838 kernel: audit: type=1325 audit(1696273823.069:951): table=filter:107 family=2 entries=2 op=nft_unregister_chain pid=4494 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:10:23.079916 kernel: audit: type=1300 audit(1696273823.069:951): arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd201d40b0 a2=0 a3=55d068613000 items=0 ppid=2488 pid=4494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:23.069000 audit[4494]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd201d40b0 a2=0 a3=55d068613000 items=0 ppid=2488 pid=4494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:23.082886 kernel: audit: type=1327 audit(1696273823.069:951): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:23.069000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:10:23.083912 kubelet[1412]: I1002 19:10:23.083866 1412 eviction_manager.go:173] "Failed to admit pod to node" pod="calico-apiserver/calico-apiserver-797695675f-jg28t" nodeCondition=[DiskPressure] Oct 2 19:10:23.104714 kubelet[1412]: I1002 19:10:23.104647 1412 eviction_manager.go:173] "Failed to admit pod to node" pod="calico-apiserver/calico-apiserver-797695675f-7q7bf" nodeCondition=[DiskPressure] Oct 2 19:10:23.128906 kubelet[1412]: I1002 19:10:23.128865 1412 eviction_manager.go:173] "Failed to admit pod to node" pod="calico-apiserver/calico-apiserver-797695675f-jrfvx" nodeCondition=[DiskPressure] Oct 2 19:10:23.134000 audit[4520]: NETFILTER_CFG table=filter:108 family=2 entries=8 op=nft_register_rule pid=4520 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:23.134000 audit[4520]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffd32cca770 a2=0 a3=7ffd32cca75c items=0 ppid=1814 pid=4520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:23.141564 kernel: audit: type=1325 audit(1696273823.134:952): table=filter:108 family=2 entries=8 op=nft_register_rule pid=4520 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:23.141716 kernel: audit: type=1300 audit(1696273823.134:952): arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffd32cca770 a2=0 a3=7ffd32cca75c items=0 ppid=1814 pid=4520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:23.134000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:23.135000 audit[4520]: NETFILTER_CFG table=nat:109 family=2 entries=78 op=nft_register_rule pid=4520 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:10:23.135000 audit[4520]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffd32cca770 a2=0 a3=7ffd32cca75c items=0 ppid=1814 pid=4520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:23.135000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:10:23.153192 kubelet[1412]: I1002 19:10:23.153153 1412 eviction_manager.go:426] "Eviction manager: pods successfully cleaned up" pods="[calico-apiserver/calico-apiserver-797695675f-gsp8h]" Oct 2 19:10:23.155589 kubelet[1412]: I1002 19:10:23.155568 1412 eviction_manager.go:173] "Failed to admit pod to node" pod="calico-apiserver/calico-apiserver-797695675f-q4x56" nodeCondition=[DiskPressure] Oct 2 19:10:23.426082 kubelet[1412]: I1002 19:10:23.425937 1412 eviction_manager.go:173] "Failed to admit pod to node" pod="calico-apiserver/calico-apiserver-797695675f-qnqkv" nodeCondition=[DiskPressure] Oct 2 19:10:23.704071 kubelet[1412]: E1002 19:10:23.703923 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:24.040274 kubelet[1412]: I1002 19:10:24.040037 1412 eviction_manager.go:173] "Failed to admit pod to node" pod="calico-apiserver/calico-apiserver-797695675f-lw7dd" nodeCondition=[DiskPressure] Oct 2 19:10:24.226862 kubelet[1412]: I1002 19:10:24.226825 1412 eviction_manager.go:173] "Failed to admit pod to node" pod="calico-apiserver/calico-apiserver-797695675f-f7rt8" nodeCondition=[DiskPressure] Oct 2 19:10:24.704804 kubelet[1412]: E1002 19:10:24.704744 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:25.705898 kubelet[1412]: E1002 19:10:25.705834 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:26.706821 kubelet[1412]: E1002 19:10:26.706763 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:10:27.706952 kubelet[1412]: E1002 19:10:27.706887 1412 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests"