Feb 9 09:45:24.990750 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Feb 9 09:45:24.990788 kernel: Linux version 5.15.148-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Feb 9 08:56:26 -00 2024 Feb 9 09:45:24.990810 kernel: efi: EFI v2.70 by EDK II Feb 9 09:45:24.990826 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71a8cf98 Feb 9 09:45:24.990840 kernel: ACPI: Early table checksum verification disabled Feb 9 09:45:24.990854 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Feb 9 09:45:24.990870 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Feb 9 09:45:24.990884 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Feb 9 09:45:24.990898 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Feb 9 09:45:24.990912 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Feb 9 09:45:24.990930 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Feb 9 09:45:24.990943 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Feb 9 09:45:24.990957 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Feb 9 09:45:24.990971 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Feb 9 09:45:24.990988 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Feb 9 09:45:24.991007 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Feb 9 09:45:24.991022 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Feb 9 09:45:24.991037 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Feb 9 09:45:24.991051 kernel: printk: bootconsole [uart0] enabled Feb 9 09:45:24.991066 kernel: NUMA: Failed to initialise from firmware Feb 9 09:45:24.991080 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Feb 9 09:45:24.991095 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Feb 9 09:45:24.991109 kernel: Zone ranges: Feb 9 09:45:24.991124 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Feb 9 09:45:24.991138 kernel: DMA32 empty Feb 9 09:45:24.991153 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Feb 9 09:45:24.991171 kernel: Movable zone start for each node Feb 9 09:45:24.991186 kernel: Early memory node ranges Feb 9 09:45:24.991200 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Feb 9 09:45:24.991214 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Feb 9 09:45:24.991229 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Feb 9 09:45:24.991243 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Feb 9 09:45:24.991257 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Feb 9 09:45:24.991272 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Feb 9 09:45:24.991286 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Feb 9 09:45:24.991300 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Feb 9 09:45:24.991314 kernel: psci: probing for conduit method from ACPI. Feb 9 09:45:24.991328 kernel: psci: PSCIv1.0 detected in firmware. Feb 9 09:45:24.991347 kernel: psci: Using standard PSCI v0.2 function IDs Feb 9 09:45:24.991363 kernel: psci: Trusted OS migration not required Feb 9 09:45:24.991384 kernel: psci: SMC Calling Convention v1.1 Feb 9 09:45:24.991400 kernel: ACPI: SRAT not present Feb 9 09:45:24.991416 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Feb 9 09:45:24.991435 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Feb 9 09:45:24.991451 kernel: pcpu-alloc: [0] 0 [0] 1 Feb 9 09:45:24.991466 kernel: Detected PIPT I-cache on CPU0 Feb 9 09:45:24.991481 kernel: CPU features: detected: GIC system register CPU interface Feb 9 09:45:24.991496 kernel: CPU features: detected: Spectre-v2 Feb 9 09:45:24.991511 kernel: CPU features: detected: Spectre-v3a Feb 9 09:45:24.991526 kernel: CPU features: detected: Spectre-BHB Feb 9 09:45:24.991542 kernel: CPU features: kernel page table isolation forced ON by KASLR Feb 9 09:45:24.991558 kernel: CPU features: detected: Kernel page table isolation (KPTI) Feb 9 09:45:24.991573 kernel: CPU features: detected: ARM erratum 1742098 Feb 9 09:45:24.991588 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Feb 9 09:45:24.991608 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Feb 9 09:45:24.991623 kernel: Policy zone: Normal Feb 9 09:45:24.991641 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=14ffd9340f674a8d04c9d43eed85484d8b2b7e2bcd8b36a975c9ac66063d537d Feb 9 09:45:24.991658 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Feb 9 09:45:24.992704 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Feb 9 09:45:24.992727 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Feb 9 09:45:24.992744 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Feb 9 09:45:24.992760 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Feb 9 09:45:24.992776 kernel: Memory: 3826316K/4030464K available (9792K kernel code, 2092K rwdata, 7556K rodata, 34688K init, 778K bss, 204148K reserved, 0K cma-reserved) Feb 9 09:45:24.992792 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Feb 9 09:45:24.992812 kernel: trace event string verifier disabled Feb 9 09:45:24.992828 kernel: rcu: Preemptible hierarchical RCU implementation. Feb 9 09:45:24.992844 kernel: rcu: RCU event tracing is enabled. Feb 9 09:45:24.992860 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Feb 9 09:45:24.992876 kernel: Trampoline variant of Tasks RCU enabled. Feb 9 09:45:24.992891 kernel: Tracing variant of Tasks RCU enabled. Feb 9 09:45:24.992907 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Feb 9 09:45:24.992922 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Feb 9 09:45:24.992937 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Feb 9 09:45:24.992953 kernel: GICv3: 96 SPIs implemented Feb 9 09:45:24.992968 kernel: GICv3: 0 Extended SPIs implemented Feb 9 09:45:24.992983 kernel: GICv3: Distributor has no Range Selector support Feb 9 09:45:24.993002 kernel: Root IRQ handler: gic_handle_irq Feb 9 09:45:24.993017 kernel: GICv3: 16 PPIs implemented Feb 9 09:45:24.993032 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Feb 9 09:45:24.993047 kernel: ACPI: SRAT not present Feb 9 09:45:24.993062 kernel: ITS [mem 0x10080000-0x1009ffff] Feb 9 09:45:24.993077 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Feb 9 09:45:24.993093 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Feb 9 09:45:24.993109 kernel: GICv3: using LPI property table @0x00000004000c0000 Feb 9 09:45:24.993124 kernel: ITS: Using hypervisor restricted LPI range [128] Feb 9 09:45:24.993139 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Feb 9 09:45:24.993154 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Feb 9 09:45:24.993174 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Feb 9 09:45:24.993190 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Feb 9 09:45:24.993205 kernel: Console: colour dummy device 80x25 Feb 9 09:45:24.993221 kernel: printk: console [tty1] enabled Feb 9 09:45:24.993237 kernel: ACPI: Core revision 20210730 Feb 9 09:45:24.993253 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Feb 9 09:45:24.993269 kernel: pid_max: default: 32768 minimum: 301 Feb 9 09:45:24.993284 kernel: LSM: Security Framework initializing Feb 9 09:45:24.993300 kernel: SELinux: Initializing. Feb 9 09:45:24.993316 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 9 09:45:24.993336 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 9 09:45:24.993352 kernel: rcu: Hierarchical SRCU implementation. Feb 9 09:45:24.993368 kernel: Platform MSI: ITS@0x10080000 domain created Feb 9 09:45:24.993384 kernel: PCI/MSI: ITS@0x10080000 domain created Feb 9 09:45:24.993400 kernel: Remapping and enabling EFI services. Feb 9 09:45:24.993416 kernel: smp: Bringing up secondary CPUs ... Feb 9 09:45:24.993431 kernel: Detected PIPT I-cache on CPU1 Feb 9 09:45:24.993448 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Feb 9 09:45:24.993463 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Feb 9 09:45:24.993483 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Feb 9 09:45:24.993499 kernel: smp: Brought up 1 node, 2 CPUs Feb 9 09:45:24.993514 kernel: SMP: Total of 2 processors activated. Feb 9 09:45:24.993548 kernel: CPU features: detected: 32-bit EL0 Support Feb 9 09:45:24.993566 kernel: CPU features: detected: 32-bit EL1 Support Feb 9 09:45:24.993582 kernel: CPU features: detected: CRC32 instructions Feb 9 09:45:24.993598 kernel: CPU: All CPU(s) started at EL1 Feb 9 09:45:24.993613 kernel: alternatives: patching kernel code Feb 9 09:45:24.993628 kernel: devtmpfs: initialized Feb 9 09:45:24.993650 kernel: KASLR disabled due to lack of seed Feb 9 09:45:24.993666 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Feb 9 09:45:24.993704 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Feb 9 09:45:24.993733 kernel: pinctrl core: initialized pinctrl subsystem Feb 9 09:45:24.993753 kernel: SMBIOS 3.0.0 present. Feb 9 09:45:24.993770 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Feb 9 09:45:24.993786 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Feb 9 09:45:24.993803 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Feb 9 09:45:24.993819 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Feb 9 09:45:24.993836 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Feb 9 09:45:24.993852 kernel: audit: initializing netlink subsys (disabled) Feb 9 09:45:24.993868 kernel: audit: type=2000 audit(0.250:1): state=initialized audit_enabled=0 res=1 Feb 9 09:45:24.993889 kernel: thermal_sys: Registered thermal governor 'step_wise' Feb 9 09:45:24.993906 kernel: cpuidle: using governor menu Feb 9 09:45:24.993922 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Feb 9 09:45:24.993938 kernel: ASID allocator initialised with 32768 entries Feb 9 09:45:24.993955 kernel: ACPI: bus type PCI registered Feb 9 09:45:24.993975 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Feb 9 09:45:24.993991 kernel: Serial: AMBA PL011 UART driver Feb 9 09:45:24.994007 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Feb 9 09:45:24.994024 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Feb 9 09:45:24.994040 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Feb 9 09:45:24.994056 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Feb 9 09:45:24.994072 kernel: cryptd: max_cpu_qlen set to 1000 Feb 9 09:45:24.994088 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Feb 9 09:45:24.994104 kernel: ACPI: Added _OSI(Module Device) Feb 9 09:45:24.994124 kernel: ACPI: Added _OSI(Processor Device) Feb 9 09:45:24.994141 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Feb 9 09:45:24.994157 kernel: ACPI: Added _OSI(Processor Aggregator Device) Feb 9 09:45:24.994173 kernel: ACPI: Added _OSI(Linux-Dell-Video) Feb 9 09:45:24.994189 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Feb 9 09:45:24.994205 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Feb 9 09:45:24.994222 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Feb 9 09:45:24.994238 kernel: ACPI: Interpreter enabled Feb 9 09:45:24.994254 kernel: ACPI: Using GIC for interrupt routing Feb 9 09:45:24.994275 kernel: ACPI: MCFG table detected, 1 entries Feb 9 09:45:24.994292 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Feb 9 09:45:24.994573 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Feb 9 09:45:24.994800 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Feb 9 09:45:24.995001 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Feb 9 09:45:24.995197 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Feb 9 09:45:24.995392 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Feb 9 09:45:24.995419 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Feb 9 09:45:24.995437 kernel: acpiphp: Slot [1] registered Feb 9 09:45:24.995453 kernel: acpiphp: Slot [2] registered Feb 9 09:45:24.995469 kernel: acpiphp: Slot [3] registered Feb 9 09:45:24.995485 kernel: acpiphp: Slot [4] registered Feb 9 09:45:24.995501 kernel: acpiphp: Slot [5] registered Feb 9 09:45:24.995517 kernel: acpiphp: Slot [6] registered Feb 9 09:45:24.995533 kernel: acpiphp: Slot [7] registered Feb 9 09:45:24.995548 kernel: acpiphp: Slot [8] registered Feb 9 09:45:24.995568 kernel: acpiphp: Slot [9] registered Feb 9 09:45:24.995585 kernel: acpiphp: Slot [10] registered Feb 9 09:45:24.995601 kernel: acpiphp: Slot [11] registered Feb 9 09:45:24.995617 kernel: acpiphp: Slot [12] registered Feb 9 09:45:24.995633 kernel: acpiphp: Slot [13] registered Feb 9 09:45:24.995648 kernel: acpiphp: Slot [14] registered Feb 9 09:45:24.995664 kernel: acpiphp: Slot [15] registered Feb 9 09:45:24.999790 kernel: acpiphp: Slot [16] registered Feb 9 09:45:24.999825 kernel: acpiphp: Slot [17] registered Feb 9 09:45:24.999843 kernel: acpiphp: Slot [18] registered Feb 9 09:45:25.013735 kernel: acpiphp: Slot [19] registered Feb 9 09:45:25.013756 kernel: acpiphp: Slot [20] registered Feb 9 09:45:25.013773 kernel: acpiphp: Slot [21] registered Feb 9 09:45:25.013790 kernel: acpiphp: Slot [22] registered Feb 9 09:45:25.013807 kernel: acpiphp: Slot [23] registered Feb 9 09:45:25.013823 kernel: acpiphp: Slot [24] registered Feb 9 09:45:25.013840 kernel: acpiphp: Slot [25] registered Feb 9 09:45:25.013856 kernel: acpiphp: Slot [26] registered Feb 9 09:45:25.013872 kernel: acpiphp: Slot [27] registered Feb 9 09:45:25.013897 kernel: acpiphp: Slot [28] registered Feb 9 09:45:25.013913 kernel: acpiphp: Slot [29] registered Feb 9 09:45:25.013930 kernel: acpiphp: Slot [30] registered Feb 9 09:45:25.013947 kernel: acpiphp: Slot [31] registered Feb 9 09:45:25.013963 kernel: PCI host bridge to bus 0000:00 Feb 9 09:45:25.014204 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Feb 9 09:45:25.014396 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Feb 9 09:45:25.014586 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Feb 9 09:45:25.014834 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Feb 9 09:45:25.015075 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Feb 9 09:45:25.015296 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Feb 9 09:45:25.015500 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Feb 9 09:45:25.015741 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Feb 9 09:45:25.015952 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Feb 9 09:45:25.016163 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Feb 9 09:45:25.016387 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Feb 9 09:45:25.016595 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Feb 9 09:45:25.016824 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Feb 9 09:45:25.017034 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Feb 9 09:45:25.017244 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Feb 9 09:45:25.017450 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Feb 9 09:45:25.031753 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Feb 9 09:45:25.038417 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Feb 9 09:45:25.038642 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Feb 9 09:45:25.038876 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Feb 9 09:45:25.039064 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Feb 9 09:45:25.039243 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Feb 9 09:45:25.039422 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Feb 9 09:45:25.039453 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Feb 9 09:45:25.039472 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Feb 9 09:45:25.039489 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Feb 9 09:45:25.039505 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Feb 9 09:45:25.039521 kernel: iommu: Default domain type: Translated Feb 9 09:45:25.039538 kernel: iommu: DMA domain TLB invalidation policy: strict mode Feb 9 09:45:25.039554 kernel: vgaarb: loaded Feb 9 09:45:25.039570 kernel: pps_core: LinuxPPS API ver. 1 registered Feb 9 09:45:25.039587 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Feb 9 09:45:25.039607 kernel: PTP clock support registered Feb 9 09:45:25.039624 kernel: Registered efivars operations Feb 9 09:45:25.039640 kernel: clocksource: Switched to clocksource arch_sys_counter Feb 9 09:45:25.039657 kernel: VFS: Disk quotas dquot_6.6.0 Feb 9 09:45:25.039688 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Feb 9 09:45:25.039710 kernel: pnp: PnP ACPI init Feb 9 09:45:25.039918 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Feb 9 09:45:25.039944 kernel: pnp: PnP ACPI: found 1 devices Feb 9 09:45:25.039961 kernel: NET: Registered PF_INET protocol family Feb 9 09:45:25.039982 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Feb 9 09:45:25.039999 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Feb 9 09:45:25.040016 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Feb 9 09:45:25.040033 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Feb 9 09:45:25.040049 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Feb 9 09:45:25.042757 kernel: TCP: Hash tables configured (established 32768 bind 32768) Feb 9 09:45:25.042795 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 9 09:45:25.042814 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 9 09:45:25.042831 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Feb 9 09:45:25.042855 kernel: PCI: CLS 0 bytes, default 64 Feb 9 09:45:25.042872 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Feb 9 09:45:25.042888 kernel: kvm [1]: HYP mode not available Feb 9 09:45:25.042906 kernel: Initialise system trusted keyrings Feb 9 09:45:25.042923 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Feb 9 09:45:25.042939 kernel: Key type asymmetric registered Feb 9 09:45:25.042956 kernel: Asymmetric key parser 'x509' registered Feb 9 09:45:25.042972 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Feb 9 09:45:25.042989 kernel: io scheduler mq-deadline registered Feb 9 09:45:25.043010 kernel: io scheduler kyber registered Feb 9 09:45:25.043026 kernel: io scheduler bfq registered Feb 9 09:45:25.043279 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Feb 9 09:45:25.043306 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Feb 9 09:45:25.043323 kernel: ACPI: button: Power Button [PWRB] Feb 9 09:45:25.043340 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Feb 9 09:45:25.043358 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Feb 9 09:45:25.043565 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Feb 9 09:45:25.043596 kernel: printk: console [ttyS0] disabled Feb 9 09:45:25.043613 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Feb 9 09:45:25.043630 kernel: printk: console [ttyS0] enabled Feb 9 09:45:25.043646 kernel: printk: bootconsole [uart0] disabled Feb 9 09:45:25.043663 kernel: thunder_xcv, ver 1.0 Feb 9 09:45:25.044755 kernel: thunder_bgx, ver 1.0 Feb 9 09:45:25.044788 kernel: nicpf, ver 1.0 Feb 9 09:45:25.044805 kernel: nicvf, ver 1.0 Feb 9 09:45:25.045053 kernel: rtc-efi rtc-efi.0: registered as rtc0 Feb 9 09:45:25.045255 kernel: rtc-efi rtc-efi.0: setting system clock to 2024-02-09T09:45:24 UTC (1707471924) Feb 9 09:45:25.045278 kernel: hid: raw HID events driver (C) Jiri Kosina Feb 9 09:45:25.045295 kernel: NET: Registered PF_INET6 protocol family Feb 9 09:45:25.045311 kernel: Segment Routing with IPv6 Feb 9 09:45:25.045328 kernel: In-situ OAM (IOAM) with IPv6 Feb 9 09:45:25.045344 kernel: NET: Registered PF_PACKET protocol family Feb 9 09:45:25.045360 kernel: Key type dns_resolver registered Feb 9 09:45:25.045377 kernel: registered taskstats version 1 Feb 9 09:45:25.045398 kernel: Loading compiled-in X.509 certificates Feb 9 09:45:25.045415 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.148-flatcar: ca91574208414224935c9cea513398977daf917d' Feb 9 09:45:25.045431 kernel: Key type .fscrypt registered Feb 9 09:45:25.045447 kernel: Key type fscrypt-provisioning registered Feb 9 09:45:25.045463 kernel: ima: No TPM chip found, activating TPM-bypass! Feb 9 09:45:25.045479 kernel: ima: Allocated hash algorithm: sha1 Feb 9 09:45:25.045495 kernel: ima: No architecture policies found Feb 9 09:45:25.045512 kernel: Freeing unused kernel memory: 34688K Feb 9 09:45:25.045547 kernel: Run /init as init process Feb 9 09:45:25.045571 kernel: with arguments: Feb 9 09:45:25.045588 kernel: /init Feb 9 09:45:25.045605 kernel: with environment: Feb 9 09:45:25.045620 kernel: HOME=/ Feb 9 09:45:25.045636 kernel: TERM=linux Feb 9 09:45:25.045652 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Feb 9 09:45:25.045692 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 9 09:45:25.048964 systemd[1]: Detected virtualization amazon. Feb 9 09:45:25.048994 systemd[1]: Detected architecture arm64. Feb 9 09:45:25.049012 systemd[1]: Running in initrd. Feb 9 09:45:25.049039 systemd[1]: No hostname configured, using default hostname. Feb 9 09:45:25.049057 systemd[1]: Hostname set to . Feb 9 09:45:25.049076 systemd[1]: Initializing machine ID from VM UUID. Feb 9 09:45:25.049094 systemd[1]: Queued start job for default target initrd.target. Feb 9 09:45:25.049113 systemd[1]: Started systemd-ask-password-console.path. Feb 9 09:45:25.049130 systemd[1]: Reached target cryptsetup.target. Feb 9 09:45:25.049152 systemd[1]: Reached target paths.target. Feb 9 09:45:25.049170 systemd[1]: Reached target slices.target. Feb 9 09:45:25.049187 systemd[1]: Reached target swap.target. Feb 9 09:45:25.049205 systemd[1]: Reached target timers.target. Feb 9 09:45:25.049224 systemd[1]: Listening on iscsid.socket. Feb 9 09:45:25.049241 systemd[1]: Listening on iscsiuio.socket. Feb 9 09:45:25.049259 systemd[1]: Listening on systemd-journald-audit.socket. Feb 9 09:45:25.049276 systemd[1]: Listening on systemd-journald-dev-log.socket. Feb 9 09:45:25.049298 systemd[1]: Listening on systemd-journald.socket. Feb 9 09:45:25.049316 systemd[1]: Listening on systemd-networkd.socket. Feb 9 09:45:25.049334 systemd[1]: Listening on systemd-udevd-control.socket. Feb 9 09:45:25.049352 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 9 09:45:25.049369 systemd[1]: Reached target sockets.target. Feb 9 09:45:25.049387 systemd[1]: Starting kmod-static-nodes.service... Feb 9 09:45:25.049404 systemd[1]: Finished network-cleanup.service. Feb 9 09:45:25.049422 systemd[1]: Starting systemd-fsck-usr.service... Feb 9 09:45:25.049440 systemd[1]: Starting systemd-journald.service... Feb 9 09:45:25.049462 systemd[1]: Starting systemd-modules-load.service... Feb 9 09:45:25.049479 systemd[1]: Starting systemd-resolved.service... Feb 9 09:45:25.049498 systemd[1]: Starting systemd-vconsole-setup.service... Feb 9 09:45:25.049516 systemd[1]: Finished kmod-static-nodes.service. Feb 9 09:45:25.049559 kernel: audit: type=1130 audit(1707471924.976:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.049580 systemd[1]: Finished systemd-fsck-usr.service. Feb 9 09:45:25.049598 kernel: audit: type=1130 audit(1707471924.998:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.049616 systemd[1]: Finished systemd-vconsole-setup.service. Feb 9 09:45:25.049643 systemd[1]: Starting dracut-cmdline-ask.service... Feb 9 09:45:25.049663 kernel: audit: type=1130 audit(1707471925.012:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.049717 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 9 09:45:25.049737 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Feb 9 09:45:25.049759 systemd-journald[308]: Journal started Feb 9 09:45:25.049873 systemd-journald[308]: Runtime Journal (/run/log/journal/ec2671fc9796bc9eeeff8f46c0de42ba) is 8.0M, max 75.4M, 67.4M free. Feb 9 09:45:24.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:24.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:24.957665 systemd-modules-load[309]: Inserted module 'overlay' Feb 9 09:45:25.062706 systemd[1]: Started systemd-journald.service. Feb 9 09:45:25.062776 kernel: Bridge firewalling registered Feb 9 09:45:25.070795 systemd-modules-load[309]: Inserted module 'br_netfilter' Feb 9 09:45:25.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.076919 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 9 09:45:25.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.099278 kernel: audit: type=1130 audit(1707471925.074:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.099341 kernel: audit: type=1130 audit(1707471925.090:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.092146 systemd[1]: Finished dracut-cmdline-ask.service. Feb 9 09:45:25.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.114977 systemd-resolved[310]: Positive Trust Anchors: Feb 9 09:45:25.131630 kernel: audit: type=1130 audit(1707471925.105:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.131669 kernel: SCSI subsystem initialized Feb 9 09:45:25.115003 systemd-resolved[310]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 9 09:45:25.115058 systemd-resolved[310]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 9 09:45:25.124050 systemd[1]: Starting dracut-cmdline.service... Feb 9 09:45:25.172846 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Feb 9 09:45:25.172901 kernel: device-mapper: uevent: version 1.0.3 Feb 9 09:45:25.177085 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Feb 9 09:45:25.185073 systemd-modules-load[309]: Inserted module 'dm_multipath' Feb 9 09:45:25.189095 systemd[1]: Finished systemd-modules-load.service. Feb 9 09:45:25.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.201304 systemd[1]: Starting systemd-sysctl.service... Feb 9 09:45:25.203241 dracut-cmdline[325]: dracut-dracut-053 Feb 9 09:45:25.204980 kernel: audit: type=1130 audit(1707471925.190:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.214154 dracut-cmdline[325]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=14ffd9340f674a8d04c9d43eed85484d8b2b7e2bcd8b36a975c9ac66063d537d Feb 9 09:45:25.234796 systemd[1]: Finished systemd-sysctl.service. Feb 9 09:45:25.245080 kernel: audit: type=1130 audit(1707471925.235:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.351711 kernel: Loading iSCSI transport class v2.0-870. Feb 9 09:45:25.364713 kernel: iscsi: registered transport (tcp) Feb 9 09:45:25.389287 kernel: iscsi: registered transport (qla4xxx) Feb 9 09:45:25.389370 kernel: QLogic iSCSI HBA Driver Feb 9 09:45:25.598625 systemd-resolved[310]: Defaulting to hostname 'linux'. Feb 9 09:45:25.600504 kernel: random: crng init done Feb 9 09:45:25.602311 systemd[1]: Started systemd-resolved.service. Feb 9 09:45:25.614360 kernel: audit: type=1130 audit(1707471925.602:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.604111 systemd[1]: Reached target nss-lookup.target. Feb 9 09:45:25.630047 systemd[1]: Finished dracut-cmdline.service. Feb 9 09:45:25.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:25.634548 systemd[1]: Starting dracut-pre-udev.service... Feb 9 09:45:25.699713 kernel: raid6: neonx8 gen() 6417 MB/s Feb 9 09:45:25.717707 kernel: raid6: neonx8 xor() 4725 MB/s Feb 9 09:45:25.735704 kernel: raid6: neonx4 gen() 6553 MB/s Feb 9 09:45:25.753707 kernel: raid6: neonx4 xor() 4906 MB/s Feb 9 09:45:25.771705 kernel: raid6: neonx2 gen() 5737 MB/s Feb 9 09:45:25.789706 kernel: raid6: neonx2 xor() 4507 MB/s Feb 9 09:45:25.807707 kernel: raid6: neonx1 gen() 4488 MB/s Feb 9 09:45:25.825705 kernel: raid6: neonx1 xor() 3676 MB/s Feb 9 09:45:25.843708 kernel: raid6: int64x8 gen() 3432 MB/s Feb 9 09:45:25.861709 kernel: raid6: int64x8 xor() 2088 MB/s Feb 9 09:45:25.879710 kernel: raid6: int64x4 gen() 3836 MB/s Feb 9 09:45:25.897706 kernel: raid6: int64x4 xor() 2199 MB/s Feb 9 09:45:25.915706 kernel: raid6: int64x2 gen() 3610 MB/s Feb 9 09:45:25.933707 kernel: raid6: int64x2 xor() 1953 MB/s Feb 9 09:45:25.951706 kernel: raid6: int64x1 gen() 2770 MB/s Feb 9 09:45:25.971189 kernel: raid6: int64x1 xor() 1455 MB/s Feb 9 09:45:25.971220 kernel: raid6: using algorithm neonx4 gen() 6553 MB/s Feb 9 09:45:25.971244 kernel: raid6: .... xor() 4906 MB/s, rmw enabled Feb 9 09:45:25.972983 kernel: raid6: using neon recovery algorithm Feb 9 09:45:25.991711 kernel: xor: measuring software checksum speed Feb 9 09:45:25.993709 kernel: 8regs : 9335 MB/sec Feb 9 09:45:25.996704 kernel: 32regs : 11108 MB/sec Feb 9 09:45:26.000641 kernel: arm64_neon : 9375 MB/sec Feb 9 09:45:26.000696 kernel: xor: using function: 32regs (11108 MB/sec) Feb 9 09:45:26.090730 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Feb 9 09:45:26.107984 systemd[1]: Finished dracut-pre-udev.service. Feb 9 09:45:26.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:26.109000 audit: BPF prog-id=7 op=LOAD Feb 9 09:45:26.109000 audit: BPF prog-id=8 op=LOAD Feb 9 09:45:26.112960 systemd[1]: Starting systemd-udevd.service... Feb 9 09:45:26.141027 systemd-udevd[508]: Using default interface naming scheme 'v252'. Feb 9 09:45:26.151428 systemd[1]: Started systemd-udevd.service. Feb 9 09:45:26.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:26.164408 systemd[1]: Starting dracut-pre-trigger.service... Feb 9 09:45:26.190940 dracut-pre-trigger[524]: rd.md=0: removing MD RAID activation Feb 9 09:45:26.251620 systemd[1]: Finished dracut-pre-trigger.service. Feb 9 09:45:26.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:26.256285 systemd[1]: Starting systemd-udev-trigger.service... Feb 9 09:45:26.363198 systemd[1]: Finished systemd-udev-trigger.service. Feb 9 09:45:26.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:26.486855 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Feb 9 09:45:26.486921 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Feb 9 09:45:26.502272 kernel: ena 0000:00:05.0: ENA device version: 0.10 Feb 9 09:45:26.502597 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Feb 9 09:45:26.513260 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Feb 9 09:45:26.513320 kernel: nvme nvme0: pci function 0000:00:04.0 Feb 9 09:45:26.520699 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:40:50:90:05:41 Feb 9 09:45:26.523715 kernel: nvme nvme0: 2/0/0 default/read/poll queues Feb 9 09:45:26.530051 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Feb 9 09:45:26.530090 kernel: GPT:9289727 != 16777215 Feb 9 09:45:26.530115 kernel: GPT:Alternate GPT header not at the end of the disk. Feb 9 09:45:26.532199 kernel: GPT:9289727 != 16777215 Feb 9 09:45:26.533490 kernel: GPT: Use GNU Parted to correct GPT errors. Feb 9 09:45:26.536902 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 9 09:45:26.540771 (udev-worker)[562]: Network interface NamePolicy= disabled on kernel command line. Feb 9 09:45:26.614731 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (565) Feb 9 09:45:26.632354 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Feb 9 09:45:26.737551 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Feb 9 09:45:26.741717 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Feb 9 09:45:26.756695 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 9 09:45:26.770210 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Feb 9 09:45:26.775173 systemd[1]: Starting disk-uuid.service... Feb 9 09:45:26.798060 disk-uuid[671]: Primary Header is updated. Feb 9 09:45:26.798060 disk-uuid[671]: Secondary Entries is updated. Feb 9 09:45:26.798060 disk-uuid[671]: Secondary Header is updated. Feb 9 09:45:26.808707 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 9 09:45:26.818703 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 9 09:45:26.827713 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 9 09:45:27.826724 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 9 09:45:27.828154 disk-uuid[672]: The operation has completed successfully. Feb 9 09:45:27.979250 systemd[1]: disk-uuid.service: Deactivated successfully. Feb 9 09:45:27.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:27.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:27.979450 systemd[1]: Finished disk-uuid.service. Feb 9 09:45:28.012911 systemd[1]: Starting verity-setup.service... Feb 9 09:45:28.044718 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Feb 9 09:45:28.128914 systemd[1]: Found device dev-mapper-usr.device. Feb 9 09:45:28.133768 systemd[1]: Mounting sysusr-usr.mount... Feb 9 09:45:28.143648 systemd[1]: Finished verity-setup.service. Feb 9 09:45:28.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:28.221727 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Feb 9 09:45:28.222579 systemd[1]: Mounted sysusr-usr.mount. Feb 9 09:45:28.225379 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Feb 9 09:45:28.229200 systemd[1]: Starting ignition-setup.service... Feb 9 09:45:28.232080 systemd[1]: Starting parse-ip-for-networkd.service... Feb 9 09:45:28.258027 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Feb 9 09:45:28.258097 kernel: BTRFS info (device nvme0n1p6): using free space tree Feb 9 09:45:28.258121 kernel: BTRFS info (device nvme0n1p6): has skinny extents Feb 9 09:45:28.268713 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Feb 9 09:45:28.286091 systemd[1]: mnt-oem.mount: Deactivated successfully. Feb 9 09:45:28.319250 systemd[1]: Finished ignition-setup.service. Feb 9 09:45:28.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:28.323782 systemd[1]: Starting ignition-fetch-offline.service... Feb 9 09:45:28.380860 systemd[1]: Finished parse-ip-for-networkd.service. Feb 9 09:45:28.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:28.383000 audit: BPF prog-id=9 op=LOAD Feb 9 09:45:28.386655 systemd[1]: Starting systemd-networkd.service... Feb 9 09:45:28.435086 systemd-networkd[1184]: lo: Link UP Feb 9 09:45:28.436783 systemd-networkd[1184]: lo: Gained carrier Feb 9 09:45:28.439385 systemd-networkd[1184]: Enumeration completed Feb 9 09:45:28.440756 systemd-networkd[1184]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 09:45:28.441290 systemd[1]: Started systemd-networkd.service. Feb 9 09:45:28.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:28.448514 systemd-networkd[1184]: eth0: Link UP Feb 9 09:45:28.448972 systemd-networkd[1184]: eth0: Gained carrier Feb 9 09:45:28.461758 systemd[1]: Reached target network.target. Feb 9 09:45:28.467423 systemd[1]: Starting iscsiuio.service... Feb 9 09:45:28.478932 systemd[1]: Started iscsiuio.service. Feb 9 09:45:28.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:28.483669 systemd[1]: Starting iscsid.service... Feb 9 09:45:28.486139 systemd-networkd[1184]: eth0: DHCPv4 address 172.31.17.0/20, gateway 172.31.16.1 acquired from 172.31.16.1 Feb 9 09:45:28.495364 iscsid[1189]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Feb 9 09:45:28.495364 iscsid[1189]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Feb 9 09:45:28.495364 iscsid[1189]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Feb 9 09:45:28.495364 iscsid[1189]: If using hardware iscsi like qla4xxx this message can be ignored. Feb 9 09:45:28.495364 iscsid[1189]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Feb 9 09:45:28.495364 iscsid[1189]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Feb 9 09:45:28.519988 systemd[1]: Started iscsid.service. Feb 9 09:45:28.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:28.533939 systemd[1]: Starting dracut-initqueue.service... Feb 9 09:45:28.558821 systemd[1]: Finished dracut-initqueue.service. Feb 9 09:45:28.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:28.562189 systemd[1]: Reached target remote-fs-pre.target. Feb 9 09:45:28.566093 systemd[1]: Reached target remote-cryptsetup.target. Feb 9 09:45:28.568035 systemd[1]: Reached target remote-fs.target. Feb 9 09:45:28.570953 systemd[1]: Starting dracut-pre-mount.service... Feb 9 09:45:28.591880 systemd[1]: Finished dracut-pre-mount.service. Feb 9 09:45:28.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:28.925849 ignition[1136]: Ignition 2.14.0 Feb 9 09:45:28.925882 ignition[1136]: Stage: fetch-offline Feb 9 09:45:28.926214 ignition[1136]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 09:45:28.926275 ignition[1136]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 09:45:28.944553 ignition[1136]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 09:45:28.945723 ignition[1136]: Ignition finished successfully Feb 9 09:45:28.950403 systemd[1]: Finished ignition-fetch-offline.service. Feb 9 09:45:28.960506 kernel: kauditd_printk_skb: 18 callbacks suppressed Feb 9 09:45:28.960577 kernel: audit: type=1130 audit(1707471928.952:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:28.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:28.955179 systemd[1]: Starting ignition-fetch.service... Feb 9 09:45:28.971342 ignition[1208]: Ignition 2.14.0 Feb 9 09:45:28.973002 ignition[1208]: Stage: fetch Feb 9 09:45:28.974473 ignition[1208]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 09:45:28.974662 ignition[1208]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 09:45:28.989725 ignition[1208]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 09:45:28.992109 ignition[1208]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 09:45:29.001399 ignition[1208]: INFO : PUT result: OK Feb 9 09:45:29.004688 ignition[1208]: DEBUG : parsed url from cmdline: "" Feb 9 09:45:29.004688 ignition[1208]: INFO : no config URL provided Feb 9 09:45:29.004688 ignition[1208]: INFO : reading system config file "/usr/lib/ignition/user.ign" Feb 9 09:45:29.010459 ignition[1208]: INFO : no config at "/usr/lib/ignition/user.ign" Feb 9 09:45:29.010459 ignition[1208]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 09:45:29.014799 ignition[1208]: INFO : PUT result: OK Feb 9 09:45:29.014799 ignition[1208]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Feb 9 09:45:29.019178 ignition[1208]: INFO : GET result: OK Feb 9 09:45:29.020832 ignition[1208]: DEBUG : parsing config with SHA512: 410ccfe175e7b753888c9897bbb5ed1998cf0ed5df718aca85169eabaed81764a5e58514c3189240906122c80fb522b652fe2d83de494769410b96a776c17321 Feb 9 09:45:29.083961 unknown[1208]: fetched base config from "system" Feb 9 09:45:29.083989 unknown[1208]: fetched base config from "system" Feb 9 09:45:29.084005 unknown[1208]: fetched user config from "aws" Feb 9 09:45:29.089813 ignition[1208]: fetch: fetch complete Feb 9 09:45:29.089837 ignition[1208]: fetch: fetch passed Feb 9 09:45:29.089926 ignition[1208]: Ignition finished successfully Feb 9 09:45:29.096487 systemd[1]: Finished ignition-fetch.service. Feb 9 09:45:29.106769 kernel: audit: type=1130 audit(1707471929.097:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.108108 systemd[1]: Starting ignition-kargs.service... Feb 9 09:45:29.125670 ignition[1214]: Ignition 2.14.0 Feb 9 09:45:29.126188 ignition[1214]: Stage: kargs Feb 9 09:45:29.126491 ignition[1214]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 09:45:29.126548 ignition[1214]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 09:45:29.140844 ignition[1214]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 09:45:29.143155 ignition[1214]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 09:45:29.146155 ignition[1214]: INFO : PUT result: OK Feb 9 09:45:29.151754 ignition[1214]: kargs: kargs passed Feb 9 09:45:29.151855 ignition[1214]: Ignition finished successfully Feb 9 09:45:29.155867 systemd[1]: Finished ignition-kargs.service. Feb 9 09:45:29.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.160265 systemd[1]: Starting ignition-disks.service... Feb 9 09:45:29.169057 kernel: audit: type=1130 audit(1707471929.157:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.176133 ignition[1220]: Ignition 2.14.0 Feb 9 09:45:29.176159 ignition[1220]: Stage: disks Feb 9 09:45:29.176462 ignition[1220]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 09:45:29.176522 ignition[1220]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 09:45:29.191098 ignition[1220]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 09:45:29.193797 ignition[1220]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 09:45:29.196480 ignition[1220]: INFO : PUT result: OK Feb 9 09:45:29.201915 ignition[1220]: disks: disks passed Feb 9 09:45:29.202023 ignition[1220]: Ignition finished successfully Feb 9 09:45:29.205714 systemd[1]: Finished ignition-disks.service. Feb 9 09:45:29.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.209190 systemd[1]: Reached target initrd-root-device.target. Feb 9 09:45:29.239821 kernel: audit: type=1130 audit(1707471929.207:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.218043 systemd[1]: Reached target local-fs-pre.target. Feb 9 09:45:29.219725 systemd[1]: Reached target local-fs.target. Feb 9 09:45:29.221259 systemd[1]: Reached target sysinit.target. Feb 9 09:45:29.222782 systemd[1]: Reached target basic.target. Feb 9 09:45:29.225632 systemd[1]: Starting systemd-fsck-root.service... Feb 9 09:45:29.261448 systemd-fsck[1228]: ROOT: clean, 602/553520 files, 56013/553472 blocks Feb 9 09:45:29.274423 systemd[1]: Finished systemd-fsck-root.service. Feb 9 09:45:29.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.279578 systemd[1]: Mounting sysroot.mount... Feb 9 09:45:29.287514 kernel: audit: type=1130 audit(1707471929.276:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.296715 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Feb 9 09:45:29.297463 systemd[1]: Mounted sysroot.mount. Feb 9 09:45:29.300069 systemd[1]: Reached target initrd-root-fs.target. Feb 9 09:45:29.314093 systemd[1]: Mounting sysroot-usr.mount... Feb 9 09:45:29.322253 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Feb 9 09:45:29.322344 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Feb 9 09:45:29.322446 systemd[1]: Reached target ignition-diskful.target. Feb 9 09:45:29.332635 systemd[1]: Mounted sysroot-usr.mount. Feb 9 09:45:29.350765 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 9 09:45:29.358221 systemd[1]: Starting initrd-setup-root.service... Feb 9 09:45:29.376710 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1245) Feb 9 09:45:29.382180 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Feb 9 09:45:29.382220 kernel: BTRFS info (device nvme0n1p6): using free space tree Feb 9 09:45:29.382245 initrd-setup-root[1250]: cut: /sysroot/etc/passwd: No such file or directory Feb 9 09:45:29.386893 kernel: BTRFS info (device nvme0n1p6): has skinny extents Feb 9 09:45:29.395712 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Feb 9 09:45:29.398965 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 9 09:45:29.413721 initrd-setup-root[1276]: cut: /sysroot/etc/group: No such file or directory Feb 9 09:45:29.421568 initrd-setup-root[1284]: cut: /sysroot/etc/shadow: No such file or directory Feb 9 09:45:29.430010 initrd-setup-root[1292]: cut: /sysroot/etc/gshadow: No such file or directory Feb 9 09:45:29.584826 systemd[1]: Finished initrd-setup-root.service. Feb 9 09:45:29.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.598834 kernel: audit: type=1130 audit(1707471929.585:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.588861 systemd[1]: Starting ignition-mount.service... Feb 9 09:45:29.600604 systemd[1]: Starting sysroot-boot.service... Feb 9 09:45:29.609004 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Feb 9 09:45:29.609266 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Feb 9 09:45:29.636127 ignition[1311]: INFO : Ignition 2.14.0 Feb 9 09:45:29.638034 ignition[1311]: INFO : Stage: mount Feb 9 09:45:29.639445 ignition[1311]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 09:45:29.639445 ignition[1311]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 09:45:29.651150 systemd[1]: Finished sysroot-boot.service. Feb 9 09:45:29.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.662701 kernel: audit: type=1130 audit(1707471929.652:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.666880 ignition[1311]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 09:45:29.669406 ignition[1311]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 09:45:29.672399 ignition[1311]: INFO : PUT result: OK Feb 9 09:45:29.678298 ignition[1311]: INFO : mount: mount passed Feb 9 09:45:29.680245 ignition[1311]: INFO : Ignition finished successfully Feb 9 09:45:29.683216 systemd[1]: Finished ignition-mount.service. Feb 9 09:45:29.684000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.687379 systemd[1]: Starting ignition-files.service... Feb 9 09:45:29.699887 kernel: audit: type=1130 audit(1707471929.684:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:29.709406 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 9 09:45:29.724720 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1320) Feb 9 09:45:29.731121 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Feb 9 09:45:29.731168 kernel: BTRFS info (device nvme0n1p6): using free space tree Feb 9 09:45:29.731191 kernel: BTRFS info (device nvme0n1p6): has skinny extents Feb 9 09:45:29.739702 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Feb 9 09:45:29.744498 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 9 09:45:29.762723 ignition[1339]: INFO : Ignition 2.14.0 Feb 9 09:45:29.762723 ignition[1339]: INFO : Stage: files Feb 9 09:45:29.766023 ignition[1339]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 09:45:29.766023 ignition[1339]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 09:45:29.782644 ignition[1339]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 09:45:29.785177 ignition[1339]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 09:45:29.788281 ignition[1339]: INFO : PUT result: OK Feb 9 09:45:29.793926 ignition[1339]: DEBUG : files: compiled without relabeling support, skipping Feb 9 09:45:29.797595 ignition[1339]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Feb 9 09:45:29.797595 ignition[1339]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Feb 9 09:45:29.844768 ignition[1339]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Feb 9 09:45:29.847618 ignition[1339]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Feb 9 09:45:29.851146 unknown[1339]: wrote ssh authorized keys file for user: core Feb 9 09:45:29.853560 ignition[1339]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Feb 9 09:45:29.856839 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Feb 9 09:45:29.860617 ignition[1339]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Feb 9 09:45:30.072945 systemd-networkd[1184]: eth0: Gained IPv6LL Feb 9 09:45:30.340669 ignition[1339]: INFO : GET result: OK Feb 9 09:45:30.901567 ignition[1339]: DEBUG : file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Feb 9 09:45:30.906529 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Feb 9 09:45:30.906529 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Feb 9 09:45:30.906529 ignition[1339]: INFO : GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Feb 9 09:45:30.983612 ignition[1339]: INFO : GET result: OK Feb 9 09:45:31.094766 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Feb 9 09:45:31.098878 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Feb 9 09:45:31.098878 ignition[1339]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Feb 9 09:45:31.487253 ignition[1339]: INFO : GET result: OK Feb 9 09:45:31.734766 ignition[1339]: DEBUG : file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Feb 9 09:45:31.739525 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Feb 9 09:45:31.739525 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubectl" Feb 9 09:45:31.739525 ignition[1339]: INFO : GET https://dl.k8s.io/release/v1.28.1/bin/linux/arm64/kubectl: attempt #1 Feb 9 09:45:31.872840 ignition[1339]: INFO : GET result: OK Feb 9 09:45:32.513319 ignition[1339]: DEBUG : file matches expected sum of: 6a5c9c02a29126949f096415bb1761a0c0ad44168e2ab3d0409982701da58f96223bec354828ddf958e945ef1ce63c0ad41e77cbcbcce0756163e71b4fbae432 Feb 9 09:45:32.518405 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubectl" Feb 9 09:45:32.518405 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Feb 9 09:45:32.518405 ignition[1339]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 9 09:45:32.538401 ignition[1339]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1430818451" Feb 9 09:45:32.545166 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1339) Feb 9 09:45:32.545201 ignition[1339]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1430818451": device or resource busy Feb 9 09:45:32.545201 ignition[1339]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1430818451", trying btrfs: device or resource busy Feb 9 09:45:32.545201 ignition[1339]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1430818451" Feb 9 09:45:32.554481 ignition[1339]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1430818451" Feb 9 09:45:32.557985 ignition[1339]: INFO : op(3): [started] unmounting "/mnt/oem1430818451" Feb 9 09:45:32.557985 ignition[1339]: INFO : op(3): [finished] unmounting "/mnt/oem1430818451" Feb 9 09:45:32.557985 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Feb 9 09:45:32.557985 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubeadm" Feb 9 09:45:32.557985 ignition[1339]: INFO : GET https://dl.k8s.io/release/v1.28.1/bin/linux/arm64/kubeadm: attempt #1 Feb 9 09:45:32.577464 systemd[1]: mnt-oem1430818451.mount: Deactivated successfully. Feb 9 09:45:32.629600 ignition[1339]: INFO : GET result: OK Feb 9 09:45:33.642882 ignition[1339]: DEBUG : file matches expected sum of: 5a08b81f9cc82d3cce21130856ca63b8dafca9149d9775dd25b376eb0f18209aa0e4a47c0a6d7e6fb1316aacd5d59dec770f26c09120c866949d70bc415518b3 Feb 9 09:45:33.648165 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubeadm" Feb 9 09:45:33.648165 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubelet" Feb 9 09:45:33.648165 ignition[1339]: INFO : GET https://dl.k8s.io/release/v1.28.1/bin/linux/arm64/kubelet: attempt #1 Feb 9 09:45:33.939545 ignition[1339]: INFO : GET result: OK Feb 9 09:45:47.325583 ignition[1339]: DEBUG : file matches expected sum of: 5a898ef543a6482895101ea58e33602e3c0a7682d322aaf08ac3dc8a5a3c8da8f09600d577024549288f8cebb1a86f9c79927796b69a3d8fe989ca8f12b147d6 Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubelet" Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/docker/daemon.json" Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/docker/daemon.json" Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/flatcar/update.conf" Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/flatcar/update.conf" Feb 9 09:45:47.330532 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Feb 9 09:45:47.330532 ignition[1339]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 9 09:45:47.400269 ignition[1339]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3857562244" Feb 9 09:45:47.400269 ignition[1339]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3857562244": device or resource busy Feb 9 09:45:47.400269 ignition[1339]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3857562244", trying btrfs: device or resource busy Feb 9 09:45:47.400269 ignition[1339]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3857562244" Feb 9 09:45:47.400269 ignition[1339]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3857562244" Feb 9 09:45:47.400269 ignition[1339]: INFO : op(6): [started] unmounting "/mnt/oem3857562244" Feb 9 09:45:47.400269 ignition[1339]: INFO : op(6): [finished] unmounting "/mnt/oem3857562244" Feb 9 09:45:47.400269 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Feb 9 09:45:47.400269 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(11): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Feb 9 09:45:47.355705 systemd[1]: mnt-oem3857562244.mount: Deactivated successfully. Feb 9 09:45:47.430871 ignition[1339]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 9 09:45:47.440166 ignition[1339]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem413423080" Feb 9 09:45:47.440166 ignition[1339]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem413423080": device or resource busy Feb 9 09:45:47.440166 ignition[1339]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem413423080", trying btrfs: device or resource busy Feb 9 09:45:47.440166 ignition[1339]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem413423080" Feb 9 09:45:47.440166 ignition[1339]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem413423080" Feb 9 09:45:47.440166 ignition[1339]: INFO : op(9): [started] unmounting "/mnt/oem413423080" Feb 9 09:45:47.440166 ignition[1339]: INFO : op(9): [finished] unmounting "/mnt/oem413423080" Feb 9 09:45:47.440166 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(11): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Feb 9 09:45:47.440166 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Feb 9 09:45:47.440166 ignition[1339]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 9 09:45:47.486643 ignition[1339]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1478549519" Feb 9 09:45:47.486643 ignition[1339]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1478549519": device or resource busy Feb 9 09:45:47.486643 ignition[1339]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1478549519", trying btrfs: device or resource busy Feb 9 09:45:47.486643 ignition[1339]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1478549519" Feb 9 09:45:47.486643 ignition[1339]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1478549519" Feb 9 09:45:47.486643 ignition[1339]: INFO : op(c): [started] unmounting "/mnt/oem1478549519" Feb 9 09:45:47.486643 ignition[1339]: INFO : op(c): [finished] unmounting "/mnt/oem1478549519" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: op(13): [started] processing unit "coreos-metadata-sshkeys@.service" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: op(13): [finished] processing unit "coreos-metadata-sshkeys@.service" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: op(14): [started] processing unit "amazon-ssm-agent.service" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: op(14): op(15): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: op(14): op(15): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: op(14): [finished] processing unit "amazon-ssm-agent.service" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: op(16): [started] processing unit "nvidia.service" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: op(16): [finished] processing unit "nvidia.service" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: op(17): [started] processing unit "prepare-cni-plugins.service" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: op(17): op(18): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: op(17): op(18): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: op(17): [finished] processing unit "prepare-cni-plugins.service" Feb 9 09:45:47.486643 ignition[1339]: INFO : files: op(19): [started] processing unit "prepare-critools.service" Feb 9 09:45:47.571496 kernel: audit: type=1130 audit(1707471947.534:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(19): op(1a): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(19): op(1a): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(19): [finished] processing unit "prepare-critools.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(1b): [started] processing unit "prepare-helm.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(1b): op(1c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(1b): op(1c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(1b): [finished] processing unit "prepare-helm.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(1d): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(1d): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(1e): [started] setting preset to enabled for "amazon-ssm-agent.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(1e): [finished] setting preset to enabled for "amazon-ssm-agent.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(1f): [started] setting preset to enabled for "nvidia.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(1f): [finished] setting preset to enabled for "nvidia.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(20): [started] setting preset to enabled for "prepare-cni-plugins.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(20): [finished] setting preset to enabled for "prepare-cni-plugins.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(21): [started] setting preset to enabled for "prepare-critools.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(21): [finished] setting preset to enabled for "prepare-critools.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(22): [started] setting preset to enabled for "prepare-helm.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: op(22): [finished] setting preset to enabled for "prepare-helm.service" Feb 9 09:45:47.571644 ignition[1339]: INFO : files: createResultFile: createFiles: op(23): [started] writing file "/sysroot/etc/.ignition-result.json" Feb 9 09:45:47.648478 kernel: audit: type=1130 audit(1707471947.574:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.648915 kernel: audit: type=1131 audit(1707471947.574:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.574000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.535309 systemd[1]: Finished ignition-files.service. Feb 9 09:45:47.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.656921 ignition[1339]: INFO : files: createResultFile: createFiles: op(23): [finished] writing file "/sysroot/etc/.ignition-result.json" Feb 9 09:45:47.656921 ignition[1339]: INFO : files: files passed Feb 9 09:45:47.656921 ignition[1339]: INFO : Ignition finished successfully Feb 9 09:45:47.685662 kernel: audit: type=1130 audit(1707471947.655:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.551343 systemd[1]: Starting initrd-setup-root-after-ignition.service... Feb 9 09:45:47.687974 initrd-setup-root-after-ignition[1364]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Feb 9 09:45:47.563960 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Feb 9 09:45:47.565262 systemd[1]: Starting ignition-quench.service... Feb 9 09:45:47.572482 systemd[1]: ignition-quench.service: Deactivated successfully. Feb 9 09:45:47.572781 systemd[1]: Finished ignition-quench.service. Feb 9 09:45:47.649916 systemd[1]: Finished initrd-setup-root-after-ignition.service. Feb 9 09:45:47.657960 systemd[1]: Reached target ignition-complete.target. Feb 9 09:45:47.672067 systemd[1]: Starting initrd-parse-etc.service... Feb 9 09:45:47.714231 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Feb 9 09:45:47.715590 systemd[1]: Finished initrd-parse-etc.service. Feb 9 09:45:47.736153 kernel: audit: type=1130 audit(1707471947.716:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.749647 kernel: audit: type=1131 audit(1707471947.724:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.725755 systemd[1]: Reached target initrd-fs.target. Feb 9 09:45:47.734813 systemd[1]: Reached target initrd.target. Feb 9 09:45:47.737662 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Feb 9 09:45:47.739119 systemd[1]: Starting dracut-pre-pivot.service... Feb 9 09:45:47.766038 systemd[1]: Finished dracut-pre-pivot.service. Feb 9 09:45:47.779010 kernel: audit: type=1130 audit(1707471947.765:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.777089 systemd[1]: Starting initrd-cleanup.service... Feb 9 09:45:47.796141 systemd[1]: Stopped target nss-lookup.target. Feb 9 09:45:47.799930 systemd[1]: Stopped target remote-cryptsetup.target. Feb 9 09:45:47.895432 kernel: audit: type=1131 audit(1707471947.800:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.895475 kernel: audit: type=1131 audit(1707471947.816:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.895501 kernel: audit: type=1131 audit(1707471947.826:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.854000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.801175 systemd[1]: Stopped target timers.target. Feb 9 09:45:47.897712 iscsid[1189]: iscsid shutting down. Feb 9 09:45:47.801953 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Feb 9 09:45:47.901471 ignition[1377]: INFO : Ignition 2.14.0 Feb 9 09:45:47.901471 ignition[1377]: INFO : Stage: umount Feb 9 09:45:47.901471 ignition[1377]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 09:45:47.901471 ignition[1377]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 09:45:47.802242 systemd[1]: Stopped dracut-pre-pivot.service. Feb 9 09:45:47.811520 systemd[1]: Stopped target initrd.target. Feb 9 09:45:47.813073 systemd[1]: Stopped target basic.target. Feb 9 09:45:47.814463 systemd[1]: Stopped target ignition-complete.target. Feb 9 09:45:47.814959 systemd[1]: Stopped target ignition-diskful.target. Feb 9 09:45:47.815272 systemd[1]: Stopped target initrd-root-device.target. Feb 9 09:45:47.815607 systemd[1]: Stopped target remote-fs.target. Feb 9 09:45:47.815949 systemd[1]: Stopped target remote-fs-pre.target. Feb 9 09:45:47.816266 systemd[1]: Stopped target sysinit.target. Feb 9 09:45:47.816594 systemd[1]: Stopped target local-fs.target. Feb 9 09:45:47.816928 systemd[1]: Stopped target local-fs-pre.target. Feb 9 09:45:47.817217 systemd[1]: Stopped target swap.target. Feb 9 09:45:47.817475 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Feb 9 09:45:47.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.817760 systemd[1]: Stopped dracut-pre-mount.service. Feb 9 09:45:47.826241 systemd[1]: Stopped target cryptsetup.target. Feb 9 09:45:47.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.827415 systemd[1]: dracut-initqueue.service: Deactivated successfully. Feb 9 09:45:47.827896 systemd[1]: Stopped dracut-initqueue.service. Feb 9 09:45:47.828585 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Feb 9 09:45:47.837833 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Feb 9 09:45:47.838441 systemd[1]: ignition-files.service: Deactivated successfully. Feb 9 09:45:47.839152 systemd[1]: Stopped ignition-files.service. Feb 9 09:45:47.854056 systemd[1]: Stopping ignition-mount.service... Feb 9 09:45:47.854974 systemd[1]: Stopping iscsid.service... Feb 9 09:45:47.855183 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Feb 9 09:45:47.855476 systemd[1]: Stopped kmod-static-nodes.service. Feb 9 09:45:47.968437 ignition[1377]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 09:45:47.968437 ignition[1377]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 09:45:47.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:47.858070 systemd[1]: Stopping sysroot-boot.service... Feb 9 09:45:47.976839 ignition[1377]: INFO : PUT result: OK Feb 9 09:45:47.858228 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Feb 9 09:45:47.858577 systemd[1]: Stopped systemd-udev-trigger.service. Feb 9 09:45:47.859532 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Feb 9 09:45:47.859813 systemd[1]: Stopped dracut-pre-trigger.service. Feb 9 09:45:47.876063 systemd[1]: initrd-cleanup.service: Deactivated successfully. Feb 9 09:45:47.878805 systemd[1]: Finished initrd-cleanup.service. Feb 9 09:45:47.892200 systemd[1]: sysroot-boot.mount: Deactivated successfully. Feb 9 09:45:47.935019 systemd[1]: sysroot-boot.service: Deactivated successfully. Feb 9 09:45:47.935200 systemd[1]: Stopped sysroot-boot.service. Feb 9 09:45:47.941244 systemd[1]: iscsid.service: Deactivated successfully. Feb 9 09:45:47.941435 systemd[1]: Stopped iscsid.service. Feb 9 09:45:47.944936 systemd[1]: Stopping iscsiuio.service... Feb 9 09:45:47.968895 systemd[1]: iscsiuio.service: Deactivated successfully. Feb 9 09:45:47.969091 systemd[1]: Stopped iscsiuio.service. Feb 9 09:45:48.004620 ignition[1377]: INFO : umount: umount passed Feb 9 09:45:48.006573 ignition[1377]: INFO : Ignition finished successfully Feb 9 09:45:48.009720 systemd[1]: ignition-mount.service: Deactivated successfully. Feb 9 09:45:48.010258 systemd[1]: Stopped ignition-mount.service. Feb 9 09:45:48.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.014050 systemd[1]: ignition-disks.service: Deactivated successfully. Feb 9 09:45:48.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.023000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.014136 systemd[1]: Stopped ignition-disks.service. Feb 9 09:45:48.016443 systemd[1]: ignition-kargs.service: Deactivated successfully. Feb 9 09:45:48.016521 systemd[1]: Stopped ignition-kargs.service. Feb 9 09:45:48.018188 systemd[1]: ignition-fetch.service: Deactivated successfully. Feb 9 09:45:48.018262 systemd[1]: Stopped ignition-fetch.service. Feb 9 09:45:48.021658 systemd[1]: Stopped target network.target. Feb 9 09:45:48.023207 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Feb 9 09:45:48.023284 systemd[1]: Stopped ignition-fetch-offline.service. Feb 9 09:45:48.045000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.025040 systemd[1]: Stopped target paths.target. Feb 9 09:45:48.026499 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Feb 9 09:45:48.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.029736 systemd[1]: Stopped systemd-ask-password-console.path. Feb 9 09:45:48.030096 systemd[1]: Stopped target slices.target. Feb 9 09:45:48.070000 audit: BPF prog-id=6 op=UNLOAD Feb 9 09:45:48.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.033083 systemd[1]: Stopped target sockets.target. Feb 9 09:45:48.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.036293 systemd[1]: iscsid.socket: Deactivated successfully. Feb 9 09:45:48.036364 systemd[1]: Closed iscsid.socket. Feb 9 09:45:48.039226 systemd[1]: iscsiuio.socket: Deactivated successfully. Feb 9 09:45:48.039294 systemd[1]: Closed iscsiuio.socket. Feb 9 09:45:48.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.041942 systemd[1]: ignition-setup.service: Deactivated successfully. Feb 9 09:45:48.042024 systemd[1]: Stopped ignition-setup.service. Feb 9 09:45:48.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.046897 systemd[1]: initrd-setup-root.service: Deactivated successfully. Feb 9 09:45:48.046974 systemd[1]: Stopped initrd-setup-root.service. Feb 9 09:45:48.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.109000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.049035 systemd[1]: Stopping systemd-networkd.service... Feb 9 09:45:48.052298 systemd[1]: Stopping systemd-resolved.service... Feb 9 09:45:48.054749 systemd-networkd[1184]: eth0: DHCPv6 lease lost Feb 9 09:45:48.123000 audit: BPF prog-id=9 op=UNLOAD Feb 9 09:45:48.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.127000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:48.058359 systemd[1]: systemd-resolved.service: Deactivated successfully. Feb 9 09:45:48.058567 systemd[1]: Stopped systemd-resolved.service. Feb 9 09:45:48.062928 systemd[1]: systemd-networkd.service: Deactivated successfully. Feb 9 09:45:48.063130 systemd[1]: Stopped systemd-networkd.service. Feb 9 09:45:48.065285 systemd[1]: systemd-networkd.socket: Deactivated successfully. Feb 9 09:45:48.065365 systemd[1]: Closed systemd-networkd.socket. Feb 9 09:45:48.068402 systemd[1]: Stopping network-cleanup.service... Feb 9 09:45:48.072430 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Feb 9 09:45:48.073848 systemd[1]: Stopped parse-ip-for-networkd.service. Feb 9 09:45:48.075714 systemd[1]: systemd-sysctl.service: Deactivated successfully. Feb 9 09:45:48.075802 systemd[1]: Stopped systemd-sysctl.service. Feb 9 09:45:48.077661 systemd[1]: systemd-modules-load.service: Deactivated successfully. Feb 9 09:45:48.077984 systemd[1]: Stopped systemd-modules-load.service. Feb 9 09:45:48.081160 systemd[1]: Stopping systemd-udevd.service... Feb 9 09:45:48.090058 systemd[1]: network-cleanup.service: Deactivated successfully. Feb 9 09:45:48.090273 systemd[1]: Stopped network-cleanup.service. Feb 9 09:45:48.193719 systemd-journald[308]: Received SIGTERM from PID 1 (n/a). Feb 9 09:45:48.094224 systemd[1]: systemd-udevd.service: Deactivated successfully. Feb 9 09:45:48.094980 systemd[1]: Stopped systemd-udevd.service. Feb 9 09:45:48.098056 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Feb 9 09:45:48.098135 systemd[1]: Closed systemd-udevd-control.socket. Feb 9 09:45:48.100394 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Feb 9 09:45:48.100469 systemd[1]: Closed systemd-udevd-kernel.socket. Feb 9 09:45:48.102884 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Feb 9 09:45:48.103624 systemd[1]: Stopped dracut-pre-udev.service. Feb 9 09:45:48.106389 systemd[1]: dracut-cmdline.service: Deactivated successfully. Feb 9 09:45:48.106470 systemd[1]: Stopped dracut-cmdline.service. Feb 9 09:45:48.108302 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Feb 9 09:45:48.108377 systemd[1]: Stopped dracut-cmdline-ask.service. Feb 9 09:45:48.109839 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Feb 9 09:45:48.110462 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Feb 9 09:45:48.110573 systemd[1]: Stopped systemd-vconsole-setup.service. Feb 9 09:45:48.126019 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Feb 9 09:45:48.126214 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Feb 9 09:45:48.129463 systemd[1]: Reached target initrd-switch-root.target. Feb 9 09:45:48.134083 systemd[1]: Starting initrd-switch-root.service... Feb 9 09:45:48.152593 systemd[1]: Switching root. Feb 9 09:45:48.212034 systemd-journald[308]: Journal stopped Feb 9 09:45:52.473577 kernel: SELinux: Class mctp_socket not defined in policy. Feb 9 09:45:52.479786 kernel: SELinux: Class anon_inode not defined in policy. Feb 9 09:45:52.479838 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 9 09:45:52.479879 kernel: SELinux: policy capability network_peer_controls=1 Feb 9 09:45:52.479911 kernel: SELinux: policy capability open_perms=1 Feb 9 09:45:52.479942 kernel: SELinux: policy capability extended_socket_class=1 Feb 9 09:45:52.479973 kernel: SELinux: policy capability always_check_network=0 Feb 9 09:45:52.480004 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 9 09:45:52.480039 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 9 09:45:52.480066 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Feb 9 09:45:52.480096 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Feb 9 09:45:52.480128 systemd[1]: Successfully loaded SELinux policy in 66.715ms. Feb 9 09:45:52.480185 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 20.004ms. Feb 9 09:45:52.480220 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 9 09:45:52.480252 systemd[1]: Detected virtualization amazon. Feb 9 09:45:52.480286 systemd[1]: Detected architecture arm64. Feb 9 09:45:52.480318 systemd[1]: Detected first boot. Feb 9 09:45:52.480356 systemd[1]: Initializing machine ID from VM UUID. Feb 9 09:45:52.480385 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Feb 9 09:45:52.480417 systemd[1]: Populated /etc with preset unit settings. Feb 9 09:45:52.480451 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 09:45:52.480487 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 09:45:52.480519 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 09:45:52.480561 systemd[1]: initrd-switch-root.service: Deactivated successfully. Feb 9 09:45:52.480592 systemd[1]: Stopped initrd-switch-root.service. Feb 9 09:45:52.480625 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Feb 9 09:45:52.480658 systemd[1]: Created slice system-addon\x2dconfig.slice. Feb 9 09:45:52.483333 systemd[1]: Created slice system-addon\x2drun.slice. Feb 9 09:45:52.483376 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Feb 9 09:45:52.483408 systemd[1]: Created slice system-getty.slice. Feb 9 09:45:52.483440 systemd[1]: Created slice system-modprobe.slice. Feb 9 09:45:52.483472 systemd[1]: Created slice system-serial\x2dgetty.slice. Feb 9 09:45:52.483512 systemd[1]: Created slice system-system\x2dcloudinit.slice. Feb 9 09:45:52.483544 systemd[1]: Created slice system-systemd\x2dfsck.slice. Feb 9 09:45:52.483575 systemd[1]: Created slice user.slice. Feb 9 09:45:52.483604 systemd[1]: Started systemd-ask-password-console.path. Feb 9 09:45:52.483636 systemd[1]: Started systemd-ask-password-wall.path. Feb 9 09:45:52.483667 systemd[1]: Set up automount boot.automount. Feb 9 09:45:52.483737 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Feb 9 09:45:52.483780 systemd[1]: Stopped target initrd-switch-root.target. Feb 9 09:45:52.483811 systemd[1]: Stopped target initrd-fs.target. Feb 9 09:45:52.483846 systemd[1]: Stopped target initrd-root-fs.target. Feb 9 09:45:52.483878 systemd[1]: Reached target integritysetup.target. Feb 9 09:45:52.483910 systemd[1]: Reached target remote-cryptsetup.target. Feb 9 09:45:52.483940 systemd[1]: Reached target remote-fs.target. Feb 9 09:45:52.483969 systemd[1]: Reached target slices.target. Feb 9 09:45:52.484000 systemd[1]: Reached target swap.target. Feb 9 09:45:52.484031 systemd[1]: Reached target torcx.target. Feb 9 09:45:52.484061 systemd[1]: Reached target veritysetup.target. Feb 9 09:45:52.484096 systemd[1]: Listening on systemd-coredump.socket. Feb 9 09:45:52.484127 systemd[1]: Listening on systemd-initctl.socket. Feb 9 09:45:52.484158 systemd[1]: Listening on systemd-networkd.socket. Feb 9 09:45:52.484189 systemd[1]: Listening on systemd-udevd-control.socket. Feb 9 09:45:52.484221 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 9 09:45:52.484250 systemd[1]: Listening on systemd-userdbd.socket. Feb 9 09:45:52.484279 systemd[1]: Mounting dev-hugepages.mount... Feb 9 09:45:52.484311 systemd[1]: Mounting dev-mqueue.mount... Feb 9 09:45:52.484344 systemd[1]: Mounting media.mount... Feb 9 09:45:52.484375 systemd[1]: Mounting sys-kernel-debug.mount... Feb 9 09:45:52.484411 systemd[1]: Mounting sys-kernel-tracing.mount... Feb 9 09:45:52.484442 systemd[1]: Mounting tmp.mount... Feb 9 09:45:52.484474 systemd[1]: Starting flatcar-tmpfiles.service... Feb 9 09:45:52.484508 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Feb 9 09:45:52.484538 systemd[1]: Starting kmod-static-nodes.service... Feb 9 09:45:52.484569 systemd[1]: Starting modprobe@configfs.service... Feb 9 09:45:52.484603 systemd[1]: Starting modprobe@dm_mod.service... Feb 9 09:45:52.484634 systemd[1]: Starting modprobe@drm.service... Feb 9 09:45:52.484670 systemd[1]: Starting modprobe@efi_pstore.service... Feb 9 09:45:52.484729 systemd[1]: Starting modprobe@fuse.service... Feb 9 09:45:52.484762 systemd[1]: Starting modprobe@loop.service... Feb 9 09:45:52.484792 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Feb 9 09:45:52.484824 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Feb 9 09:45:52.484854 systemd[1]: Stopped systemd-fsck-root.service. Feb 9 09:45:52.484890 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Feb 9 09:45:52.484922 systemd[1]: Stopped systemd-fsck-usr.service. Feb 9 09:45:52.484953 kernel: fuse: init (API version 7.34) Feb 9 09:45:52.484986 systemd[1]: Stopped systemd-journald.service. Feb 9 09:45:52.485016 systemd[1]: Starting systemd-journald.service... Feb 9 09:45:52.485046 systemd[1]: Starting systemd-modules-load.service... Feb 9 09:45:52.485077 systemd[1]: Starting systemd-network-generator.service... Feb 9 09:45:52.485109 systemd[1]: Starting systemd-remount-fs.service... Feb 9 09:45:52.494808 systemd[1]: Starting systemd-udev-trigger.service... Feb 9 09:45:52.494857 systemd[1]: verity-setup.service: Deactivated successfully. Feb 9 09:45:52.494898 systemd[1]: Stopped verity-setup.service. Feb 9 09:45:52.494928 systemd[1]: Mounted dev-hugepages.mount. Feb 9 09:45:52.494957 systemd[1]: Mounted dev-mqueue.mount. Feb 9 09:45:52.494994 systemd[1]: Mounted media.mount. Feb 9 09:45:52.495024 systemd[1]: Mounted sys-kernel-debug.mount. Feb 9 09:45:52.495054 systemd[1]: Mounted sys-kernel-tracing.mount. Feb 9 09:45:52.495083 systemd[1]: Mounted tmp.mount. Feb 9 09:45:52.495119 systemd[1]: Finished kmod-static-nodes.service. Feb 9 09:45:52.495149 systemd[1]: modprobe@configfs.service: Deactivated successfully. Feb 9 09:45:52.495178 systemd[1]: Finished modprobe@configfs.service. Feb 9 09:45:52.495209 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Feb 9 09:45:52.495238 systemd[1]: Finished modprobe@dm_mod.service. Feb 9 09:45:52.495272 systemd[1]: modprobe@drm.service: Deactivated successfully. Feb 9 09:45:52.495301 systemd[1]: Finished modprobe@drm.service. Feb 9 09:45:52.495332 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Feb 9 09:45:52.495362 systemd[1]: Finished modprobe@efi_pstore.service. Feb 9 09:45:52.495391 systemd[1]: modprobe@fuse.service: Deactivated successfully. Feb 9 09:45:52.495424 systemd[1]: Finished modprobe@fuse.service. Feb 9 09:45:52.495457 systemd[1]: Finished systemd-modules-load.service. Feb 9 09:45:52.495495 systemd[1]: Finished systemd-network-generator.service. Feb 9 09:45:52.495535 systemd-journald[1499]: Journal started Feb 9 09:45:52.495635 systemd-journald[1499]: Runtime Journal (/run/log/journal/ec2671fc9796bc9eeeff8f46c0de42ba) is 8.0M, max 75.4M, 67.4M free. Feb 9 09:45:52.503432 systemd[1]: Finished systemd-remount-fs.service. Feb 9 09:45:52.503507 systemd[1]: Reached target network-pre.target. Feb 9 09:45:48.394000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Feb 9 09:45:48.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 9 09:45:48.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 9 09:45:48.480000 audit: BPF prog-id=10 op=LOAD Feb 9 09:45:48.480000 audit: BPF prog-id=10 op=UNLOAD Feb 9 09:45:48.480000 audit: BPF prog-id=11 op=LOAD Feb 9 09:45:48.480000 audit: BPF prog-id=11 op=UNLOAD Feb 9 09:45:48.588000 audit[1411]: AVC avc: denied { associate } for pid=1411 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Feb 9 09:45:48.588000 audit[1411]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001858e2 a1=4000028e40 a2=4000027100 a3=32 items=0 ppid=1394 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:45:48.588000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 9 09:45:48.593000 audit[1411]: AVC avc: denied { associate } for pid=1411 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Feb 9 09:45:48.593000 audit[1411]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001859b9 a2=1ed a3=0 items=2 ppid=1394 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:45:48.593000 audit: CWD cwd="/" Feb 9 09:45:48.593000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 09:45:48.593000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 09:45:48.593000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 9 09:45:52.077000 audit: BPF prog-id=12 op=LOAD Feb 9 09:45:52.077000 audit: BPF prog-id=3 op=UNLOAD Feb 9 09:45:52.077000 audit: BPF prog-id=13 op=LOAD Feb 9 09:45:52.077000 audit: BPF prog-id=14 op=LOAD Feb 9 09:45:52.077000 audit: BPF prog-id=4 op=UNLOAD Feb 9 09:45:52.077000 audit: BPF prog-id=5 op=UNLOAD Feb 9 09:45:52.079000 audit: BPF prog-id=15 op=LOAD Feb 9 09:45:52.079000 audit: BPF prog-id=12 op=UNLOAD Feb 9 09:45:52.079000 audit: BPF prog-id=16 op=LOAD Feb 9 09:45:52.079000 audit: BPF prog-id=17 op=LOAD Feb 9 09:45:52.079000 audit: BPF prog-id=13 op=UNLOAD Feb 9 09:45:52.079000 audit: BPF prog-id=14 op=UNLOAD Feb 9 09:45:52.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.087000 audit: BPF prog-id=15 op=UNLOAD Feb 9 09:45:52.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.333000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.349000 audit: BPF prog-id=18 op=LOAD Feb 9 09:45:52.350000 audit: BPF prog-id=19 op=LOAD Feb 9 09:45:52.350000 audit: BPF prog-id=20 op=LOAD Feb 9 09:45:52.350000 audit: BPF prog-id=16 op=UNLOAD Feb 9 09:45:52.350000 audit: BPF prog-id=17 op=UNLOAD Feb 9 09:45:52.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.463000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Feb 9 09:45:52.463000 audit[1499]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=fffff95321e0 a2=4000 a3=1 items=0 ppid=1 pid=1499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:45:52.463000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Feb 9 09:45:52.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.481000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.515880 systemd[1]: Mounting sys-fs-fuse-connections.mount... Feb 9 09:45:52.075038 systemd[1]: Queued start job for default target multi-user.target. Feb 9 09:45:48.585603 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 09:45:52.082302 systemd[1]: systemd-journald.service: Deactivated successfully. Feb 9 09:45:48.587413 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 9 09:45:48.587465 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 9 09:45:48.587534 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Feb 9 09:45:48.587561 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=debug msg="skipped missing lower profile" missing profile=oem Feb 9 09:45:48.587631 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Feb 9 09:45:48.587663 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Feb 9 09:45:48.588144 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Feb 9 09:45:48.588245 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 9 09:45:48.588282 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 9 09:45:52.531075 systemd[1]: Mounting sys-kernel-config.mount... Feb 9 09:45:52.531141 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Feb 9 09:45:52.531180 kernel: loop: module loaded Feb 9 09:45:48.589274 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Feb 9 09:45:48.589361 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Feb 9 09:45:48.589409 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.2: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.2 Feb 9 09:45:48.589470 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Feb 9 09:45:48.589519 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.2: no such file or directory" path=/var/lib/torcx/store/3510.3.2 Feb 9 09:45:48.589559 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:48Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Feb 9 09:45:51.310152 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:51Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 09:45:51.310699 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:51Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 09:45:51.310956 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:51Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 09:45:51.311399 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:51Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 09:45:51.311506 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:51Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Feb 9 09:45:51.311641 /usr/lib/systemd/system-generators/torcx-generator[1411]: time="2024-02-09T09:45:51Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Feb 9 09:45:52.540345 systemd[1]: Starting systemd-hwdb-update.service... Feb 9 09:45:52.545716 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Feb 9 09:45:52.552278 systemd[1]: Starting systemd-random-seed.service... Feb 9 09:45:52.571721 systemd[1]: Starting systemd-sysctl.service... Feb 9 09:45:52.571810 systemd[1]: Started systemd-journald.service. Feb 9 09:45:52.571852 kernel: kauditd_printk_skb: 91 callbacks suppressed Feb 9 09:45:52.571889 kernel: audit: type=1130 audit(1707471952.566:129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.569727 systemd[1]: Finished flatcar-tmpfiles.service. Feb 9 09:45:52.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.580271 systemd[1]: modprobe@loop.service: Deactivated successfully. Feb 9 09:45:52.588364 kernel: audit: type=1130 audit(1707471952.578:130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.588766 systemd[1]: Finished modprobe@loop.service. Feb 9 09:45:52.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.590827 systemd[1]: Mounted sys-fs-fuse-connections.mount. Feb 9 09:45:52.592797 systemd[1]: Mounted sys-kernel-config.mount. Feb 9 09:45:52.603921 systemd[1]: Starting systemd-journal-flush.service... Feb 9 09:45:52.589000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.608829 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Feb 9 09:45:52.612031 systemd[1]: Starting systemd-sysusers.service... Feb 9 09:45:52.618495 kernel: audit: type=1130 audit(1707471952.589:131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.624245 kernel: audit: type=1131 audit(1707471952.589:132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.623784 systemd[1]: Finished systemd-random-seed.service. Feb 9 09:45:52.626032 kernel: audit: type=1130 audit(1707471952.624:133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.626006 systemd[1]: Reached target first-boot-complete.target. Feb 9 09:45:52.645659 systemd-journald[1499]: Time spent on flushing to /var/log/journal/ec2671fc9796bc9eeeff8f46c0de42ba is 75.347ms for 1171 entries. Feb 9 09:45:52.645659 systemd-journald[1499]: System Journal (/var/log/journal/ec2671fc9796bc9eeeff8f46c0de42ba) is 8.0M, max 195.6M, 187.6M free. Feb 9 09:45:52.751082 systemd-journald[1499]: Received client request to flush runtime journal. Feb 9 09:45:52.751206 kernel: audit: type=1130 audit(1707471952.665:134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.751285 kernel: audit: type=1130 audit(1707471952.692:135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.751338 kernel: audit: type=1130 audit(1707471952.736:136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.664274 systemd[1]: Finished systemd-sysctl.service. Feb 9 09:45:52.691534 systemd[1]: Finished systemd-sysusers.service. Feb 9 09:45:52.733053 systemd[1]: Finished systemd-udev-trigger.service. Feb 9 09:45:52.746282 systemd[1]: Starting systemd-udev-settle.service... Feb 9 09:45:52.754147 systemd[1]: Finished systemd-journal-flush.service. Feb 9 09:45:52.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.771735 kernel: audit: type=1130 audit(1707471952.756:137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:52.779038 udevadm[1530]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Feb 9 09:45:53.442559 systemd[1]: Finished systemd-hwdb-update.service. Feb 9 09:45:53.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:53.454899 systemd[1]: Starting systemd-udevd.service... Feb 9 09:45:53.452000 audit: BPF prog-id=21 op=LOAD Feb 9 09:45:53.452000 audit: BPF prog-id=22 op=LOAD Feb 9 09:45:53.452000 audit: BPF prog-id=7 op=UNLOAD Feb 9 09:45:53.452000 audit: BPF prog-id=8 op=UNLOAD Feb 9 09:45:53.460704 kernel: audit: type=1130 audit(1707471953.442:138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:53.492335 systemd-udevd[1531]: Using default interface naming scheme 'v252'. Feb 9 09:45:53.523757 systemd[1]: Started systemd-udevd.service. Feb 9 09:45:53.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:53.526000 audit: BPF prog-id=23 op=LOAD Feb 9 09:45:53.529257 systemd[1]: Starting systemd-networkd.service... Feb 9 09:45:53.537000 audit: BPF prog-id=24 op=LOAD Feb 9 09:45:53.537000 audit: BPF prog-id=25 op=LOAD Feb 9 09:45:53.537000 audit: BPF prog-id=26 op=LOAD Feb 9 09:45:53.540551 systemd[1]: Starting systemd-userdbd.service... Feb 9 09:45:53.619524 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Feb 9 09:45:53.629544 (udev-worker)[1542]: Network interface NamePolicy= disabled on kernel command line. Feb 9 09:45:53.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:53.645460 systemd[1]: Started systemd-userdbd.service. Feb 9 09:45:53.809710 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1542) Feb 9 09:45:53.817159 systemd-networkd[1537]: lo: Link UP Feb 9 09:45:53.817763 systemd-networkd[1537]: lo: Gained carrier Feb 9 09:45:53.818974 systemd-networkd[1537]: Enumeration completed Feb 9 09:45:53.819290 systemd[1]: Started systemd-networkd.service. Feb 9 09:45:53.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:53.823259 systemd[1]: Starting systemd-networkd-wait-online.service... Feb 9 09:45:53.826159 systemd-networkd[1537]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 09:45:53.831700 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 09:45:53.832382 systemd-networkd[1537]: eth0: Link UP Feb 9 09:45:53.832901 systemd-networkd[1537]: eth0: Gained carrier Feb 9 09:45:53.844931 systemd-networkd[1537]: eth0: DHCPv4 address 172.31.17.0/20, gateway 172.31.16.1 acquired from 172.31.16.1 Feb 9 09:45:53.984135 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 9 09:45:53.999367 systemd[1]: Finished systemd-udev-settle.service. Feb 9 09:45:54.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.003444 systemd[1]: Starting lvm2-activation-early.service... Feb 9 09:45:54.021131 lvm[1650]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 9 09:45:54.058234 systemd[1]: Finished lvm2-activation-early.service. Feb 9 09:45:54.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.060305 systemd[1]: Reached target cryptsetup.target. Feb 9 09:45:54.064279 systemd[1]: Starting lvm2-activation.service... Feb 9 09:45:54.073002 lvm[1651]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 9 09:45:54.111310 systemd[1]: Finished lvm2-activation.service. Feb 9 09:45:54.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.113282 systemd[1]: Reached target local-fs-pre.target. Feb 9 09:45:54.115088 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Feb 9 09:45:54.115144 systemd[1]: Reached target local-fs.target. Feb 9 09:45:54.116784 systemd[1]: Reached target machines.target. Feb 9 09:45:54.120775 systemd[1]: Starting ldconfig.service... Feb 9 09:45:54.123099 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Feb 9 09:45:54.123245 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 09:45:54.125786 systemd[1]: Starting systemd-boot-update.service... Feb 9 09:45:54.129482 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Feb 9 09:45:54.139389 systemd[1]: Starting systemd-machine-id-commit.service... Feb 9 09:45:54.141552 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Feb 9 09:45:54.141700 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Feb 9 09:45:54.144043 systemd[1]: Starting systemd-tmpfiles-setup.service... Feb 9 09:45:54.159340 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1653 (bootctl) Feb 9 09:45:54.161799 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Feb 9 09:45:54.203168 systemd-tmpfiles[1656]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Feb 9 09:45:54.212847 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Feb 9 09:45:54.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.216306 systemd-tmpfiles[1656]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Feb 9 09:45:54.230270 systemd-tmpfiles[1656]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Feb 9 09:45:54.273166 systemd-fsck[1662]: fsck.fat 4.2 (2021-01-31) Feb 9 09:45:54.273166 systemd-fsck[1662]: /dev/nvme0n1p1: 236 files, 113719/258078 clusters Feb 9 09:45:54.276663 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Feb 9 09:45:54.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.281541 systemd[1]: Mounting boot.mount... Feb 9 09:45:54.305924 systemd[1]: Mounted boot.mount. Feb 9 09:45:54.335251 systemd[1]: Finished systemd-boot-update.service. Feb 9 09:45:54.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.385623 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Feb 9 09:45:54.388078 systemd[1]: Finished systemd-machine-id-commit.service. Feb 9 09:45:54.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.596294 systemd[1]: Finished systemd-tmpfiles-setup.service. Feb 9 09:45:54.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.601111 systemd[1]: Starting audit-rules.service... Feb 9 09:45:54.605080 systemd[1]: Starting clean-ca-certificates.service... Feb 9 09:45:54.610124 systemd[1]: Starting systemd-journal-catalog-update.service... Feb 9 09:45:54.612000 audit: BPF prog-id=27 op=LOAD Feb 9 09:45:54.616398 systemd[1]: Starting systemd-resolved.service... Feb 9 09:45:54.619000 audit: BPF prog-id=28 op=LOAD Feb 9 09:45:54.623206 systemd[1]: Starting systemd-timesyncd.service... Feb 9 09:45:54.628104 systemd[1]: Starting systemd-update-utmp.service... Feb 9 09:45:54.661294 systemd[1]: Finished clean-ca-certificates.service. Feb 9 09:45:54.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.663377 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Feb 9 09:45:54.669000 audit[1681]: SYSTEM_BOOT pid=1681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.674994 systemd[1]: Finished systemd-update-utmp.service. Feb 9 09:45:54.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.683785 ldconfig[1652]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Feb 9 09:45:54.698865 systemd[1]: Finished ldconfig.service. Feb 9 09:45:54.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.720983 systemd[1]: Finished systemd-journal-catalog-update.service. Feb 9 09:45:54.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.725523 systemd[1]: Starting systemd-update-done.service... Feb 9 09:45:54.750342 systemd[1]: Finished systemd-update-done.service. Feb 9 09:45:54.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:45:54.762000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Feb 9 09:45:54.762000 audit[1697]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe8bfc070 a2=420 a3=0 items=0 ppid=1676 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:45:54.762000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Feb 9 09:45:54.764198 augenrules[1697]: No rules Feb 9 09:45:54.765704 systemd[1]: Finished audit-rules.service. Feb 9 09:45:54.795023 systemd[1]: Started systemd-timesyncd.service. Feb 9 09:45:54.797000 systemd[1]: Reached target time-set.target. Feb 9 09:45:54.809642 systemd-resolved[1679]: Positive Trust Anchors: Feb 9 09:45:54.810201 systemd-resolved[1679]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 9 09:45:54.810356 systemd-resolved[1679]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 9 09:45:54.836306 systemd-resolved[1679]: Defaulting to hostname 'linux'. Feb 9 09:45:54.839432 systemd[1]: Started systemd-resolved.service. Feb 9 09:45:54.841320 systemd[1]: Reached target network.target. Feb 9 09:45:54.843009 systemd[1]: Reached target nss-lookup.target. Feb 9 09:45:54.844721 systemd[1]: Reached target sysinit.target. Feb 9 09:45:54.846454 systemd[1]: Started motdgen.path. Feb 9 09:45:54.847974 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Feb 9 09:45:54.850412 systemd[1]: Started logrotate.timer. Feb 9 09:45:54.852001 systemd[1]: Started mdadm.timer. Feb 9 09:45:54.853348 systemd[1]: Started systemd-tmpfiles-clean.timer. Feb 9 09:45:54.855070 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Feb 9 09:45:54.855119 systemd[1]: Reached target paths.target. Feb 9 09:45:54.856588 systemd[1]: Reached target timers.target. Feb 9 09:45:54.865816 systemd[1]: Listening on dbus.socket. Feb 9 09:45:54.869638 systemd[1]: Starting docker.socket... Feb 9 09:45:54.876353 systemd[1]: Listening on sshd.socket. Feb 9 09:45:54.878715 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 09:45:54.879842 systemd[1]: Listening on docker.socket. Feb 9 09:45:54.881730 systemd[1]: Reached target sockets.target. Feb 9 09:45:54.883463 systemd[1]: Reached target basic.target. Feb 9 09:45:54.885098 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 9 09:45:54.885290 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 9 09:45:54.897640 systemd[1]: Starting containerd.service... Feb 9 09:45:54.898266 systemd-timesyncd[1680]: Contacted time server 104.194.8.227:123 (0.flatcar.pool.ntp.org). Feb 9 09:45:54.898949 systemd-timesyncd[1680]: Initial clock synchronization to Fri 2024-02-09 09:45:55.243531 UTC. Feb 9 09:45:54.902926 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Feb 9 09:45:54.907249 systemd[1]: Starting dbus.service... Feb 9 09:45:54.911525 systemd[1]: Starting enable-oem-cloudinit.service... Feb 9 09:45:54.915874 systemd[1]: Starting extend-filesystems.service... Feb 9 09:45:54.917663 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Feb 9 09:45:54.920049 systemd[1]: Starting motdgen.service... Feb 9 09:45:55.014762 jq[1708]: false Feb 9 09:45:54.923849 systemd[1]: Starting prepare-cni-plugins.service... Feb 9 09:45:54.927792 systemd[1]: Starting prepare-critools.service... Feb 9 09:45:54.933815 systemd[1]: Starting prepare-helm.service... Feb 9 09:45:54.938092 systemd[1]: Starting ssh-key-proc-cmdline.service... Feb 9 09:45:54.942206 systemd[1]: Starting sshd-keygen.service... Feb 9 09:45:54.949367 systemd[1]: Starting systemd-logind.service... Feb 9 09:45:54.951008 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 09:45:54.951132 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Feb 9 09:45:55.055509 tar[1723]: linux-arm64/helm Feb 9 09:45:54.952078 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Feb 9 09:45:55.057968 tar[1722]: ./ Feb 9 09:45:55.057968 tar[1722]: ./loopback Feb 9 09:45:54.954186 systemd[1]: Starting update-engine.service... Feb 9 09:45:55.080391 jq[1720]: true Feb 9 09:45:54.959418 systemd[1]: Starting update-ssh-keys-after-ignition.service... Feb 9 09:45:54.967658 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Feb 9 09:45:54.968075 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Feb 9 09:45:54.968852 systemd-networkd[1537]: eth0: Gained IPv6LL Feb 9 09:45:55.132174 tar[1731]: crictl Feb 9 09:45:54.977510 systemd[1]: Finished systemd-networkd-wait-online.service. Feb 9 09:45:54.980027 systemd[1]: Reached target network-online.target. Feb 9 09:45:54.983967 systemd[1]: Started amazon-ssm-agent.service. Feb 9 09:45:54.988440 systemd[1]: Started nvidia.service. Feb 9 09:45:55.059383 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Feb 9 09:45:55.059731 systemd[1]: Finished ssh-key-proc-cmdline.service. Feb 9 09:45:55.182125 jq[1735]: true Feb 9 09:45:55.215680 extend-filesystems[1709]: Found nvme0n1 Feb 9 09:45:55.217996 extend-filesystems[1709]: Found nvme0n1p1 Feb 9 09:45:55.217996 extend-filesystems[1709]: Found nvme0n1p2 Feb 9 09:45:55.217996 extend-filesystems[1709]: Found nvme0n1p3 Feb 9 09:45:55.217996 extend-filesystems[1709]: Found usr Feb 9 09:45:55.217996 extend-filesystems[1709]: Found nvme0n1p4 Feb 9 09:45:55.217996 extend-filesystems[1709]: Found nvme0n1p6 Feb 9 09:45:55.217996 extend-filesystems[1709]: Found nvme0n1p7 Feb 9 09:45:55.217996 extend-filesystems[1709]: Found nvme0n1p9 Feb 9 09:45:55.217996 extend-filesystems[1709]: Checking size of /dev/nvme0n1p9 Feb 9 09:45:55.222910 dbus-daemon[1707]: [system] SELinux support is enabled Feb 9 09:45:55.223257 systemd[1]: Started dbus.service. Feb 9 09:45:55.266830 dbus-daemon[1707]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.0' (uid=244 pid=1537 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Feb 9 09:45:55.249410 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Feb 9 09:45:55.280331 dbus-daemon[1707]: [system] Successfully activated service 'org.freedesktop.systemd1' Feb 9 09:45:55.249457 systemd[1]: Reached target system-config.target. Feb 9 09:45:55.253025 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Feb 9 09:45:55.253071 systemd[1]: Reached target user-config.target. Feb 9 09:45:55.286866 systemd[1]: Starting systemd-hostnamed.service... Feb 9 09:45:55.325636 systemd[1]: motdgen.service: Deactivated successfully. Feb 9 09:45:55.326107 systemd[1]: Finished motdgen.service. Feb 9 09:45:55.339925 extend-filesystems[1709]: Resized partition /dev/nvme0n1p9 Feb 9 09:45:55.351218 extend-filesystems[1764]: resize2fs 1.46.5 (30-Dec-2021) Feb 9 09:45:55.381001 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Feb 9 09:45:55.381411 update_engine[1717]: I0209 09:45:55.379997 1717 main.cc:92] Flatcar Update Engine starting Feb 9 09:45:55.394215 systemd[1]: Started update-engine.service. Feb 9 09:45:55.399396 systemd[1]: Started locksmithd.service. Feb 9 09:45:55.402296 update_engine[1717]: I0209 09:45:55.402065 1717 update_check_scheduler.cc:74] Next update check in 5m38s Feb 9 09:45:55.481036 systemd[1]: nvidia.service: Deactivated successfully. Feb 9 09:45:55.541726 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Feb 9 09:45:55.562290 extend-filesystems[1764]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Feb 9 09:45:55.562290 extend-filesystems[1764]: old_desc_blocks = 1, new_desc_blocks = 1 Feb 9 09:45:55.562290 extend-filesystems[1764]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Feb 9 09:45:55.583955 extend-filesystems[1709]: Resized filesystem in /dev/nvme0n1p9 Feb 9 09:45:55.601765 amazon-ssm-agent[1726]: 2024/02/09 09:45:55 Failed to load instance info from vault. RegistrationKey does not exist. Feb 9 09:45:55.601765 amazon-ssm-agent[1726]: Initializing new seelog logger Feb 9 09:45:55.601765 amazon-ssm-agent[1726]: New Seelog Logger Creation Complete Feb 9 09:45:55.601765 amazon-ssm-agent[1726]: 2024/02/09 09:45:55 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Feb 9 09:45:55.601765 amazon-ssm-agent[1726]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Feb 9 09:45:55.601765 amazon-ssm-agent[1726]: 2024/02/09 09:45:55 processing appconfig overrides Feb 9 09:45:55.587324 systemd[1]: extend-filesystems.service: Deactivated successfully. Feb 9 09:45:55.605836 bash[1780]: Updated "/home/core/.ssh/authorized_keys" Feb 9 09:45:55.587679 systemd[1]: Finished extend-filesystems.service. Feb 9 09:45:55.598883 systemd[1]: Finished update-ssh-keys-after-ignition.service. Feb 9 09:45:55.623483 tar[1722]: ./bandwidth Feb 9 09:45:55.666263 env[1730]: time="2024-02-09T09:45:55.666062552Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Feb 9 09:45:55.693484 systemd-logind[1716]: Watching system buttons on /dev/input/event0 (Power Button) Feb 9 09:45:55.700980 systemd-logind[1716]: New seat seat0. Feb 9 09:45:55.710017 systemd[1]: Started systemd-logind.service. Feb 9 09:45:55.844252 env[1730]: time="2024-02-09T09:45:55.839238052Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Feb 9 09:45:55.846146 env[1730]: time="2024-02-09T09:45:55.846088736Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Feb 9 09:45:55.861580 env[1730]: time="2024-02-09T09:45:55.859843420Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.148-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Feb 9 09:45:55.861866 env[1730]: time="2024-02-09T09:45:55.861823260Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Feb 9 09:45:55.863943 env[1730]: time="2024-02-09T09:45:55.863883943Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 9 09:45:55.865894 env[1730]: time="2024-02-09T09:45:55.865835328Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Feb 9 09:45:55.866378 env[1730]: time="2024-02-09T09:45:55.866335852Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Feb 9 09:45:55.866810 env[1730]: time="2024-02-09T09:45:55.866767425Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Feb 9 09:45:55.867680 env[1730]: time="2024-02-09T09:45:55.867638257Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Feb 9 09:45:55.871493 env[1730]: time="2024-02-09T09:45:55.871439026Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Feb 9 09:45:55.874725 env[1730]: time="2024-02-09T09:45:55.874633917Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 9 09:45:55.878410 env[1730]: time="2024-02-09T09:45:55.878326139Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Feb 9 09:45:55.879137 env[1730]: time="2024-02-09T09:45:55.879046212Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Feb 9 09:45:55.880199 env[1730]: time="2024-02-09T09:45:55.879987935Z" level=info msg="metadata content store policy set" policy=shared Feb 9 09:45:55.893044 env[1730]: time="2024-02-09T09:45:55.892959880Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Feb 9 09:45:55.893430 env[1730]: time="2024-02-09T09:45:55.893378972Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Feb 9 09:45:55.893600 env[1730]: time="2024-02-09T09:45:55.893568563Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Feb 9 09:45:55.893874 env[1730]: time="2024-02-09T09:45:55.893817254Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Feb 9 09:45:55.894043 env[1730]: time="2024-02-09T09:45:55.894010551Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Feb 9 09:45:55.894483 env[1730]: time="2024-02-09T09:45:55.894438106Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Feb 9 09:45:55.894709 env[1730]: time="2024-02-09T09:45:55.894651795Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Feb 9 09:45:55.895395 env[1730]: time="2024-02-09T09:45:55.895343276Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Feb 9 09:45:55.895575 env[1730]: time="2024-02-09T09:45:55.895543295Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Feb 9 09:45:55.897861 env[1730]: time="2024-02-09T09:45:55.897801732Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Feb 9 09:45:55.898055 env[1730]: time="2024-02-09T09:45:55.898021518Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Feb 9 09:45:55.898185 env[1730]: time="2024-02-09T09:45:55.898154076Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Feb 9 09:45:55.898513 env[1730]: time="2024-02-09T09:45:55.898482672Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Feb 9 09:45:55.900651 env[1730]: time="2024-02-09T09:45:55.900601516Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Feb 9 09:45:55.901267 env[1730]: time="2024-02-09T09:45:55.901227975Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Feb 9 09:45:55.902872 env[1730]: time="2024-02-09T09:45:55.902820470Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Feb 9 09:45:55.903206 env[1730]: time="2024-02-09T09:45:55.903170097Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Feb 9 09:45:55.903434 env[1730]: time="2024-02-09T09:45:55.903400824Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Feb 9 09:45:55.903585 env[1730]: time="2024-02-09T09:45:55.903553236Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Feb 9 09:45:55.903746 env[1730]: time="2024-02-09T09:45:55.903715762Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Feb 9 09:45:55.906323 env[1730]: time="2024-02-09T09:45:55.906268908Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Feb 9 09:45:55.907037 env[1730]: time="2024-02-09T09:45:55.906993437Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Feb 9 09:45:55.907229 env[1730]: time="2024-02-09T09:45:55.907197150Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Feb 9 09:45:55.907413 dbus-daemon[1707]: [system] Successfully activated service 'org.freedesktop.hostname1' Feb 9 09:45:55.907680 systemd[1]: Started systemd-hostnamed.service. Feb 9 09:45:55.910897 env[1730]: time="2024-02-09T09:45:55.910850339Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Feb 9 09:45:55.911049 env[1730]: time="2024-02-09T09:45:55.911018437Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Feb 9 09:45:55.911238 env[1730]: time="2024-02-09T09:45:55.911207703Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Feb 9 09:45:55.912117 dbus-daemon[1707]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1757 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Feb 9 09:45:55.917395 systemd[1]: Starting polkit.service... Feb 9 09:45:55.923502 env[1730]: time="2024-02-09T09:45:55.923409051Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Feb 9 09:45:55.923802 env[1730]: time="2024-02-09T09:45:55.923767165Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Feb 9 09:45:55.923938 env[1730]: time="2024-02-09T09:45:55.923906245Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Feb 9 09:45:55.924067 env[1730]: time="2024-02-09T09:45:55.924035899Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Feb 9 09:45:55.924212 env[1730]: time="2024-02-09T09:45:55.924175416Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Feb 9 09:45:55.924335 env[1730]: time="2024-02-09T09:45:55.924304344Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Feb 9 09:45:55.924473 env[1730]: time="2024-02-09T09:45:55.924440494Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Feb 9 09:45:55.924636 env[1730]: time="2024-02-09T09:45:55.924605387Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Feb 9 09:45:55.925258 env[1730]: time="2024-02-09T09:45:55.925147860Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Feb 9 09:45:55.926625 env[1730]: time="2024-02-09T09:45:55.925674435Z" level=info msg="Connect containerd service" Feb 9 09:45:55.926625 env[1730]: time="2024-02-09T09:45:55.925781543Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Feb 9 09:45:55.932676 env[1730]: time="2024-02-09T09:45:55.932615628Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 9 09:45:55.935088 env[1730]: time="2024-02-09T09:45:55.935038945Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Feb 9 09:45:55.935370 env[1730]: time="2024-02-09T09:45:55.935340814Z" level=info msg=serving... address=/run/containerd/containerd.sock Feb 9 09:45:55.935652 systemd[1]: Started containerd.service. Feb 9 09:45:55.938775 env[1730]: time="2024-02-09T09:45:55.938709210Z" level=info msg="containerd successfully booted in 0.476590s" Feb 9 09:45:55.944901 env[1730]: time="2024-02-09T09:45:55.944809552Z" level=info msg="Start subscribing containerd event" Feb 9 09:45:55.945260 env[1730]: time="2024-02-09T09:45:55.945216301Z" level=info msg="Start recovering state" Feb 9 09:45:55.945417 env[1730]: time="2024-02-09T09:45:55.945376161Z" level=info msg="Start event monitor" Feb 9 09:45:55.945511 env[1730]: time="2024-02-09T09:45:55.945442146Z" level=info msg="Start snapshots syncer" Feb 9 09:45:55.945511 env[1730]: time="2024-02-09T09:45:55.945472453Z" level=info msg="Start cni network conf syncer for default" Feb 9 09:45:55.945511 env[1730]: time="2024-02-09T09:45:55.945503411Z" level=info msg="Start streaming server" Feb 9 09:45:55.973553 polkitd[1817]: Started polkitd version 121 Feb 9 09:45:55.998997 tar[1722]: ./ptp Feb 9 09:45:56.014672 polkitd[1817]: Loading rules from directory /etc/polkit-1/rules.d Feb 9 09:45:56.014813 polkitd[1817]: Loading rules from directory /usr/share/polkit-1/rules.d Feb 9 09:45:56.038145 polkitd[1817]: Finished loading, compiling and executing 2 rules Feb 9 09:45:56.042065 dbus-daemon[1707]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Feb 9 09:45:56.042423 systemd[1]: Started polkit.service. Feb 9 09:45:56.046683 polkitd[1817]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Feb 9 09:45:56.100513 systemd-resolved[1679]: System hostname changed to 'ip-172-31-17-0'. Feb 9 09:45:56.100528 systemd-hostnamed[1757]: Hostname set to (transient) Feb 9 09:45:56.359242 tar[1722]: ./vlan Feb 9 09:45:56.376973 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO Create new startup processor Feb 9 09:45:56.380602 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [LongRunningPluginsManager] registered plugins: {} Feb 9 09:45:56.401426 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO Initializing bookkeeping folders Feb 9 09:45:56.401649 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO removing the completed state files Feb 9 09:45:56.401813 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO Initializing bookkeeping folders for long running plugins Feb 9 09:45:56.401948 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Feb 9 09:45:56.402077 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO Initializing healthcheck folders for long running plugins Feb 9 09:45:56.402196 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO Initializing locations for inventory plugin Feb 9 09:45:56.402325 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO Initializing default location for custom inventory Feb 9 09:45:56.402452 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO Initializing default location for file inventory Feb 9 09:45:56.402579 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO Initializing default location for role inventory Feb 9 09:45:56.402704 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO Init the cloudwatchlogs publisher Feb 9 09:45:56.402876 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [instanceID=i-03ed69ad85c976660] Successfully loaded platform independent plugin aws:runPowerShellScript Feb 9 09:45:56.403005 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [instanceID=i-03ed69ad85c976660] Successfully loaded platform independent plugin aws:configureDocker Feb 9 09:45:56.403136 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [instanceID=i-03ed69ad85c976660] Successfully loaded platform independent plugin aws:runDockerAction Feb 9 09:45:56.403400 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [instanceID=i-03ed69ad85c976660] Successfully loaded platform independent plugin aws:runDocument Feb 9 09:45:56.403646 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [instanceID=i-03ed69ad85c976660] Successfully loaded platform independent plugin aws:softwareInventory Feb 9 09:45:56.413670 coreos-metadata[1706]: Feb 09 09:45:56.413 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Feb 9 09:45:56.415606 coreos-metadata[1706]: Feb 09 09:45:56.415 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Feb 9 09:45:56.416898 coreos-metadata[1706]: Feb 09 09:45:56.416 INFO Fetch successful Feb 9 09:45:56.416898 coreos-metadata[1706]: Feb 09 09:45:56.416 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Feb 9 09:45:56.417832 coreos-metadata[1706]: Feb 09 09:45:56.417 INFO Fetch successful Feb 9 09:45:56.432209 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [instanceID=i-03ed69ad85c976660] Successfully loaded platform independent plugin aws:updateSsmAgent Feb 9 09:45:56.432209 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [instanceID=i-03ed69ad85c976660] Successfully loaded platform independent plugin aws:refreshAssociation Feb 9 09:45:56.432209 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [instanceID=i-03ed69ad85c976660] Successfully loaded platform independent plugin aws:configurePackage Feb 9 09:45:56.432209 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [instanceID=i-03ed69ad85c976660] Successfully loaded platform independent plugin aws:downloadContent Feb 9 09:45:56.432209 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [instanceID=i-03ed69ad85c976660] Successfully loaded platform dependent plugin aws:runShellScript Feb 9 09:45:56.432209 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Feb 9 09:45:56.432209 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO OS: linux, Arch: arm64 Feb 9 09:45:56.432209 amazon-ssm-agent[1726]: datastore file /var/lib/amazon/ssm/i-03ed69ad85c976660/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Feb 9 09:45:56.433059 unknown[1706]: wrote ssh authorized keys file for user: core Feb 9 09:45:56.481580 update-ssh-keys[1886]: Updated "/home/core/.ssh/authorized_keys" Feb 9 09:45:56.482308 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Feb 9 09:45:56.504004 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessagingDeliveryService] Starting document processing engine... Feb 9 09:45:56.599067 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessagingDeliveryService] [EngineProcessor] Starting Feb 9 09:45:56.672674 tar[1722]: ./host-device Feb 9 09:45:56.693456 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Feb 9 09:45:56.787965 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessagingDeliveryService] Starting message polling Feb 9 09:45:56.834101 tar[1722]: ./tuning Feb 9 09:45:56.882787 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessagingDeliveryService] Starting send replies to MDS Feb 9 09:45:56.950755 tar[1722]: ./vrf Feb 9 09:45:56.977749 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [instanceID=i-03ed69ad85c976660] Starting association polling Feb 9 09:45:57.042634 systemd[1]: Created slice system-sshd.slice. Feb 9 09:45:57.072949 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Feb 9 09:45:57.076659 tar[1722]: ./sbr Feb 9 09:45:57.168263 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessagingDeliveryService] [Association] Launching response handler Feb 9 09:45:57.189419 tar[1722]: ./tap Feb 9 09:45:57.263909 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Feb 9 09:45:57.326908 tar[1722]: ./dhcp Feb 9 09:45:57.359605 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Feb 9 09:45:57.382553 systemd[1]: Finished prepare-critools.service. Feb 9 09:45:57.455511 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Feb 9 09:45:57.552112 tar[1723]: linux-arm64/LICENSE Feb 9 09:45:57.552112 tar[1723]: linux-arm64/README.md Feb 9 09:45:57.554966 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessageGatewayService] Starting session document processing engine... Feb 9 09:45:57.560050 systemd[1]: Finished prepare-helm.service. Feb 9 09:45:57.603247 tar[1722]: ./static Feb 9 09:45:57.649446 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessageGatewayService] [EngineProcessor] Starting Feb 9 09:45:57.651598 tar[1722]: ./firewall Feb 9 09:45:57.722968 tar[1722]: ./macvlan Feb 9 09:45:57.745982 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Feb 9 09:45:57.789853 tar[1722]: ./dummy Feb 9 09:45:57.842702 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-03ed69ad85c976660, requestId: 8706e12c-632d-4bdc-b2f8-368431286302 Feb 9 09:45:57.844176 sshd_keygen[1739]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Feb 9 09:45:57.856785 tar[1722]: ./bridge Feb 9 09:45:57.890932 systemd[1]: Finished sshd-keygen.service. Feb 9 09:45:57.895679 systemd[1]: Starting issuegen.service... Feb 9 09:45:57.899839 systemd[1]: Started sshd@0-172.31.17.0:22-139.178.89.65:59864.service. Feb 9 09:45:57.928083 systemd[1]: issuegen.service: Deactivated successfully. Feb 9 09:45:57.928430 systemd[1]: Finished issuegen.service. Feb 9 09:45:57.933830 systemd[1]: Starting systemd-user-sessions.service... Feb 9 09:45:57.939767 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [OfflineService] Starting document processing engine... Feb 9 09:45:57.952659 systemd[1]: Finished systemd-user-sessions.service. Feb 9 09:45:57.957435 systemd[1]: Started getty@tty1.service. Feb 9 09:45:57.962689 systemd[1]: Started serial-getty@ttyS0.service. Feb 9 09:45:57.965576 systemd[1]: Reached target getty.target. Feb 9 09:45:57.981793 tar[1722]: ./ipvlan Feb 9 09:45:58.031529 locksmithd[1776]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Feb 9 09:45:58.036878 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [OfflineService] [EngineProcessor] Starting Feb 9 09:45:58.052913 tar[1722]: ./portmap Feb 9 09:45:58.119946 tar[1722]: ./host-local Feb 9 09:45:58.121181 sshd[1913]: Accepted publickey for core from 139.178.89.65 port 59864 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:45:58.125838 sshd[1913]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:45:58.134367 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [OfflineService] [EngineProcessor] Initial processing Feb 9 09:45:58.148671 systemd[1]: Created slice user-500.slice. Feb 9 09:45:58.154023 systemd[1]: Starting user-runtime-dir@500.service... Feb 9 09:45:58.171544 systemd-logind[1716]: New session 1 of user core. Feb 9 09:45:58.180388 systemd[1]: Finished user-runtime-dir@500.service. Feb 9 09:45:58.186210 systemd[1]: Starting user@500.service... Feb 9 09:45:58.198388 (systemd)[1923]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:45:58.228097 systemd[1]: Finished prepare-cni-plugins.service. Feb 9 09:45:58.230551 systemd[1]: Reached target multi-user.target. Feb 9 09:45:58.235972 systemd[1]: Starting systemd-update-utmp-runlevel.service... Feb 9 09:45:58.239458 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [OfflineService] Starting message polling Feb 9 09:45:58.252752 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Feb 9 09:45:58.253123 systemd[1]: Finished systemd-update-utmp-runlevel.service. Feb 9 09:45:58.337251 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [OfflineService] Starting send replies to MDS Feb 9 09:45:58.406229 systemd[1923]: Queued start job for default target default.target. Feb 9 09:45:58.408802 systemd[1923]: Reached target paths.target. Feb 9 09:45:58.409013 systemd[1923]: Reached target sockets.target. Feb 9 09:45:58.409157 systemd[1923]: Reached target timers.target. Feb 9 09:45:58.409328 systemd[1923]: Reached target basic.target. Feb 9 09:45:58.409540 systemd[1923]: Reached target default.target. Feb 9 09:45:58.409639 systemd[1]: Started user@500.service. Feb 9 09:45:58.411234 systemd[1923]: Startup finished in 195ms. Feb 9 09:45:58.413166 systemd[1]: Started session-1.scope. Feb 9 09:45:58.415068 systemd[1]: Startup finished in 1.142s (kernel) + 23.731s (initrd) + 10.090s (userspace) = 34.965s. Feb 9 09:45:58.435052 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [LongRunningPluginsManager] starting long running plugin manager Feb 9 09:45:58.533199 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Feb 9 09:45:58.581913 systemd[1]: Started sshd@1-172.31.17.0:22-139.178.89.65:40944.service. Feb 9 09:45:58.631549 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [HealthCheck] HealthCheck reporting agent health. Feb 9 09:45:58.730119 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Feb 9 09:45:58.763532 sshd[1935]: Accepted publickey for core from 139.178.89.65 port 40944 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:45:58.766088 sshd[1935]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:45:58.775618 systemd[1]: Started session-2.scope. Feb 9 09:45:58.776742 systemd-logind[1716]: New session 2 of user core. Feb 9 09:45:58.829307 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessageGatewayService] listening reply. Feb 9 09:45:58.918297 sshd[1935]: pam_unix(sshd:session): session closed for user core Feb 9 09:45:58.922575 systemd[1]: session-2.scope: Deactivated successfully. Feb 9 09:45:58.923825 systemd-logind[1716]: Session 2 logged out. Waiting for processes to exit. Feb 9 09:45:58.924219 systemd[1]: sshd@1-172.31.17.0:22-139.178.89.65:40944.service: Deactivated successfully. Feb 9 09:45:58.926347 systemd-logind[1716]: Removed session 2. Feb 9 09:45:58.928494 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [StartupProcessor] Executing startup processor tasks Feb 9 09:45:58.946884 systemd[1]: Started sshd@2-172.31.17.0:22-139.178.89.65:40956.service. Feb 9 09:45:59.028360 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Feb 9 09:45:59.126908 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Feb 9 09:45:59.130370 sshd[1941]: Accepted publickey for core from 139.178.89.65 port 40956 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:45:59.133327 sshd[1941]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:45:59.141693 systemd[1]: Started session-3.scope. Feb 9 09:45:59.143930 systemd-logind[1716]: New session 3 of user core. Feb 9 09:45:59.226445 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.2 Feb 9 09:45:59.270104 sshd[1941]: pam_unix(sshd:session): session closed for user core Feb 9 09:45:59.274452 systemd[1]: sshd@2-172.31.17.0:22-139.178.89.65:40956.service: Deactivated successfully. Feb 9 09:45:59.275767 systemd[1]: session-3.scope: Deactivated successfully. Feb 9 09:45:59.276931 systemd-logind[1716]: Session 3 logged out. Waiting for processes to exit. Feb 9 09:45:59.279175 systemd-logind[1716]: Removed session 3. Feb 9 09:45:59.299919 systemd[1]: Started sshd@3-172.31.17.0:22-139.178.89.65:40970.service. Feb 9 09:45:59.326332 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-03ed69ad85c976660?role=subscribe&stream=input Feb 9 09:45:59.426225 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-03ed69ad85c976660?role=subscribe&stream=input Feb 9 09:45:59.481520 sshd[1947]: Accepted publickey for core from 139.178.89.65 port 40970 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:45:59.484495 sshd[1947]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:45:59.491779 systemd-logind[1716]: New session 4 of user core. Feb 9 09:45:59.493196 systemd[1]: Started session-4.scope. Feb 9 09:45:59.526306 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessageGatewayService] Starting receiving message from control channel Feb 9 09:45:59.625987 sshd[1947]: pam_unix(sshd:session): session closed for user core Feb 9 09:45:59.626567 amazon-ssm-agent[1726]: 2024-02-09 09:45:56 INFO [MessageGatewayService] [EngineProcessor] Initial processing Feb 9 09:45:59.631692 systemd-logind[1716]: Session 4 logged out. Waiting for processes to exit. Feb 9 09:45:59.632939 systemd[1]: sshd@3-172.31.17.0:22-139.178.89.65:40970.service: Deactivated successfully. Feb 9 09:45:59.634164 systemd[1]: session-4.scope: Deactivated successfully. Feb 9 09:45:59.635637 systemd-logind[1716]: Removed session 4. Feb 9 09:45:59.653060 systemd[1]: Started sshd@4-172.31.17.0:22-139.178.89.65:40978.service. Feb 9 09:45:59.831277 sshd[1953]: Accepted publickey for core from 139.178.89.65 port 40978 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:45:59.834213 sshd[1953]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:45:59.841924 systemd-logind[1716]: New session 5 of user core. Feb 9 09:45:59.842859 systemd[1]: Started session-5.scope. Feb 9 09:45:59.968444 sudo[1956]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Feb 9 09:45:59.969240 sudo[1956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 09:45:59.983946 dbus-daemon[1707]: avc: received setenforce notice (enforcing=1) Feb 9 09:45:59.985851 sudo[1956]: pam_unix(sudo:session): session closed for user root Feb 9 09:46:00.010884 sshd[1953]: pam_unix(sshd:session): session closed for user core Feb 9 09:46:00.016741 systemd-logind[1716]: Session 5 logged out. Waiting for processes to exit. Feb 9 09:46:00.017383 systemd[1]: sshd@4-172.31.17.0:22-139.178.89.65:40978.service: Deactivated successfully. Feb 9 09:46:00.018640 systemd[1]: session-5.scope: Deactivated successfully. Feb 9 09:46:00.020255 systemd-logind[1716]: Removed session 5. Feb 9 09:46:00.041242 systemd[1]: Started sshd@5-172.31.17.0:22-139.178.89.65:40988.service. Feb 9 09:46:00.223604 sshd[1960]: Accepted publickey for core from 139.178.89.65 port 40988 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:46:00.226655 sshd[1960]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:46:00.235380 systemd[1]: Started session-6.scope. Feb 9 09:46:00.236797 systemd-logind[1716]: New session 6 of user core. Feb 9 09:46:00.346190 sudo[1964]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Feb 9 09:46:00.346713 sudo[1964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 09:46:00.352599 sudo[1964]: pam_unix(sudo:session): session closed for user root Feb 9 09:46:00.362122 sudo[1963]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Feb 9 09:46:00.363202 sudo[1963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 09:46:00.385906 systemd[1]: Stopping audit-rules.service... Feb 9 09:46:00.385000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 9 09:46:00.388153 auditctl[1967]: No rules Feb 9 09:46:00.390796 kernel: kauditd_printk_skb: 30 callbacks suppressed Feb 9 09:46:00.390888 kernel: audit: type=1305 audit(1707471960.385:167): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 9 09:46:00.389119 systemd[1]: audit-rules.service: Deactivated successfully. Feb 9 09:46:00.389497 systemd[1]: Stopped audit-rules.service. Feb 9 09:46:00.395720 kernel: audit: type=1300 audit(1707471960.385:167): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffda055df0 a2=420 a3=0 items=0 ppid=1 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:00.385000 audit[1967]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffda055df0 a2=420 a3=0 items=0 ppid=1 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:00.396431 systemd[1]: Starting audit-rules.service... Feb 9 09:46:00.385000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Feb 9 09:46:00.411412 kernel: audit: type=1327 audit(1707471960.385:167): proctitle=2F7362696E2F617564697463746C002D44 Feb 9 09:46:00.411507 kernel: audit: type=1131 audit(1707471960.387:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:00.387000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:00.450530 augenrules[1984]: No rules Feb 9 09:46:00.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:00.452208 systemd[1]: Finished audit-rules.service. Feb 9 09:46:00.461000 audit[1963]: USER_END pid=1963 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 09:46:00.462082 sudo[1963]: pam_unix(sudo:session): session closed for user root Feb 9 09:46:00.471530 kernel: audit: type=1130 audit(1707471960.451:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:00.471612 kernel: audit: type=1106 audit(1707471960.461:170): pid=1963 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 09:46:00.461000 audit[1963]: CRED_DISP pid=1963 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 09:46:00.480373 kernel: audit: type=1104 audit(1707471960.461:171): pid=1963 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 09:46:00.494636 sshd[1960]: pam_unix(sshd:session): session closed for user core Feb 9 09:46:00.495000 audit[1960]: USER_END pid=1960 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:46:00.499821 systemd[1]: session-6.scope: Deactivated successfully. Feb 9 09:46:00.501541 systemd[1]: sshd@5-172.31.17.0:22-139.178.89.65:40988.service: Deactivated successfully. Feb 9 09:46:00.496000 audit[1960]: CRED_DISP pid=1960 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:46:00.518141 kernel: audit: type=1106 audit(1707471960.495:172): pid=1960 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:46:00.518253 kernel: audit: type=1104 audit(1707471960.496:173): pid=1960 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:46:00.518206 systemd-logind[1716]: Session 6 logged out. Waiting for processes to exit. Feb 9 09:46:00.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.17.0:22-139.178.89.65:40988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:00.527900 kernel: audit: type=1131 audit(1707471960.501:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.17.0:22-139.178.89.65:40988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:00.535184 systemd[1]: Started sshd@6-172.31.17.0:22-139.178.89.65:40996.service. Feb 9 09:46:00.536362 systemd-logind[1716]: Removed session 6. Feb 9 09:46:00.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.17.0:22-139.178.89.65:40996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:00.722000 audit[1991]: USER_ACCT pid=1991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:46:00.723141 sshd[1991]: Accepted publickey for core from 139.178.89.65 port 40996 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:46:00.724000 audit[1991]: CRED_ACQ pid=1991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:46:00.724000 audit[1991]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd9870a0 a2=3 a3=1 items=0 ppid=1 pid=1991 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:00.724000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:46:00.726275 sshd[1991]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:46:00.735455 systemd-logind[1716]: New session 7 of user core. Feb 9 09:46:00.736369 systemd[1]: Started session-7.scope. Feb 9 09:46:00.747000 audit[1991]: USER_START pid=1991 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:46:00.750000 audit[1993]: CRED_ACQ pid=1993 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:46:00.848000 audit[1994]: USER_ACCT pid=1994 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 09:46:00.850481 sudo[1994]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Feb 9 09:46:00.849000 audit[1994]: CRED_REFR pid=1994 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 09:46:00.851578 sudo[1994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 09:46:00.853000 audit[1994]: USER_START pid=1994 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 09:46:01.858862 systemd[1]: Starting docker.service... Feb 9 09:46:01.934825 env[2009]: time="2024-02-09T09:46:01.934729235Z" level=info msg="Starting up" Feb 9 09:46:01.938080 env[2009]: time="2024-02-09T09:46:01.938032190Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 9 09:46:01.938258 env[2009]: time="2024-02-09T09:46:01.938228928Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 9 09:46:01.938428 env[2009]: time="2024-02-09T09:46:01.938395830Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 9 09:46:01.938537 env[2009]: time="2024-02-09T09:46:01.938509423Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 9 09:46:01.942095 env[2009]: time="2024-02-09T09:46:01.942027966Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 9 09:46:01.942095 env[2009]: time="2024-02-09T09:46:01.942073680Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 9 09:46:01.942276 env[2009]: time="2024-02-09T09:46:01.942108947Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 9 09:46:01.942276 env[2009]: time="2024-02-09T09:46:01.942131014Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 9 09:46:01.954019 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2078495419-merged.mount: Deactivated successfully. Feb 9 09:46:02.189291 env[2009]: time="2024-02-09T09:46:02.189158226Z" level=info msg="Loading containers: start." Feb 9 09:46:02.269000 audit[2040]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2040 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.269000 audit[2040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffeca79c80 a2=0 a3=1 items=0 ppid=2009 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.269000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Feb 9 09:46:02.273000 audit[2042]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.273000 audit[2042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffcc79fed0 a2=0 a3=1 items=0 ppid=2009 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.273000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Feb 9 09:46:02.276000 audit[2044]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2044 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.276000 audit[2044]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd62d3cf0 a2=0 a3=1 items=0 ppid=2009 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.276000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 9 09:46:02.280000 audit[2046]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2046 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.280000 audit[2046]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd77d3160 a2=0 a3=1 items=0 ppid=2009 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.280000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 9 09:46:02.286000 audit[2048]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.286000 audit[2048]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff546af60 a2=0 a3=1 items=0 ppid=2009 pid=2048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.286000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Feb 9 09:46:02.315000 audit[2053]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2053 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.315000 audit[2053]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd69255a0 a2=0 a3=1 items=0 ppid=2009 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.315000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Feb 9 09:46:02.329000 audit[2055]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2055 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.329000 audit[2055]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd8316350 a2=0 a3=1 items=0 ppid=2009 pid=2055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.329000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Feb 9 09:46:02.334000 audit[2057]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.334000 audit[2057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe016e570 a2=0 a3=1 items=0 ppid=2009 pid=2057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.334000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Feb 9 09:46:02.339000 audit[2059]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2059 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.339000 audit[2059]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffff27d61e0 a2=0 a3=1 items=0 ppid=2009 pid=2059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.339000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 09:46:02.354000 audit[2063]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2063 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.354000 audit[2063]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffecd93360 a2=0 a3=1 items=0 ppid=2009 pid=2063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.354000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 9 09:46:02.356000 audit[2064]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2064 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.356000 audit[2064]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd73e41e0 a2=0 a3=1 items=0 ppid=2009 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.356000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 09:46:02.369766 kernel: Initializing XFRM netlink socket Feb 9 09:46:02.413242 env[2009]: time="2024-02-09T09:46:02.413170659Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Feb 9 09:46:02.414786 (udev-worker)[2020]: Network interface NamePolicy= disabled on kernel command line. Feb 9 09:46:02.447000 audit[2072]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2072 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.447000 audit[2072]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffc5aafb00 a2=0 a3=1 items=0 ppid=2009 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.447000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Feb 9 09:46:02.462000 audit[2075]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2075 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.462000 audit[2075]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffef50e8c0 a2=0 a3=1 items=0 ppid=2009 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.462000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Feb 9 09:46:02.467000 audit[2078]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2078 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.467000 audit[2078]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffdde40400 a2=0 a3=1 items=0 ppid=2009 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.467000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Feb 9 09:46:02.472000 audit[2080]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.472000 audit[2080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc7b34db0 a2=0 a3=1 items=0 ppid=2009 pid=2080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.472000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Feb 9 09:46:02.476000 audit[2082]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.476000 audit[2082]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd3b2f5e0 a2=0 a3=1 items=0 ppid=2009 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.476000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Feb 9 09:46:02.480000 audit[2084]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2084 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.480000 audit[2084]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffe08d5460 a2=0 a3=1 items=0 ppid=2009 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.480000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Feb 9 09:46:02.484000 audit[2086]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.484000 audit[2086]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffceb81e20 a2=0 a3=1 items=0 ppid=2009 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.484000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Feb 9 09:46:02.498000 audit[2089]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.498000 audit[2089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffde769c70 a2=0 a3=1 items=0 ppid=2009 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.498000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Feb 9 09:46:02.503000 audit[2091]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2091 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.503000 audit[2091]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffc5e317b0 a2=0 a3=1 items=0 ppid=2009 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.503000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 9 09:46:02.507000 audit[2093]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.507000 audit[2093]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffce7c0660 a2=0 a3=1 items=0 ppid=2009 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.507000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 9 09:46:02.510000 audit[2095]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2095 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.510000 audit[2095]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc70c4030 a2=0 a3=1 items=0 ppid=2009 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.510000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Feb 9 09:46:02.512866 systemd-networkd[1537]: docker0: Link UP Feb 9 09:46:02.526000 audit[2099]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2099 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.526000 audit[2099]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe5a517b0 a2=0 a3=1 items=0 ppid=2009 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.526000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 9 09:46:02.529000 audit[2100]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2100 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:02.529000 audit[2100]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffca50ea80 a2=0 a3=1 items=0 ppid=2009 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:02.529000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 09:46:02.531406 env[2009]: time="2024-02-09T09:46:02.531364105Z" level=info msg="Loading containers: done." Feb 9 09:46:02.553260 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3971453105-merged.mount: Deactivated successfully. Feb 9 09:46:02.569316 env[2009]: time="2024-02-09T09:46:02.569239686Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Feb 9 09:46:02.569728 env[2009]: time="2024-02-09T09:46:02.569644174Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Feb 9 09:46:02.570014 env[2009]: time="2024-02-09T09:46:02.569947970Z" level=info msg="Daemon has completed initialization" Feb 9 09:46:02.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:02.594793 systemd[1]: Started docker.service. Feb 9 09:46:02.604688 env[2009]: time="2024-02-09T09:46:02.604524190Z" level=info msg="API listen on /run/docker.sock" Feb 9 09:46:02.643800 systemd[1]: Reloading. Feb 9 09:46:02.779655 /usr/lib/systemd/system-generators/torcx-generator[2151]: time="2024-02-09T09:46:02Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 09:46:02.794830 /usr/lib/systemd/system-generators/torcx-generator[2151]: time="2024-02-09T09:46:02Z" level=info msg="torcx already run" Feb 9 09:46:02.941884 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 09:46:02.942419 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 09:46:02.980975 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 09:46:03.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.149000 audit: BPF prog-id=37 op=LOAD Feb 9 09:46:03.149000 audit: BPF prog-id=28 op=UNLOAD Feb 9 09:46:03.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.152000 audit: BPF prog-id=38 op=LOAD Feb 9 09:46:03.152000 audit: BPF prog-id=24 op=UNLOAD Feb 9 09:46:03.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.153000 audit: BPF prog-id=39 op=LOAD Feb 9 09:46:03.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.154000 audit: BPF prog-id=40 op=LOAD Feb 9 09:46:03.154000 audit: BPF prog-id=25 op=UNLOAD Feb 9 09:46:03.154000 audit: BPF prog-id=26 op=UNLOAD Feb 9 09:46:03.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.159000 audit: BPF prog-id=41 op=LOAD Feb 9 09:46:03.159000 audit: BPF prog-id=23 op=UNLOAD Feb 9 09:46:03.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit: BPF prog-id=42 op=LOAD Feb 9 09:46:03.162000 audit: BPF prog-id=18 op=UNLOAD Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit: BPF prog-id=43 op=LOAD Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.162000 audit: BPF prog-id=44 op=LOAD Feb 9 09:46:03.162000 audit: BPF prog-id=19 op=UNLOAD Feb 9 09:46:03.162000 audit: BPF prog-id=20 op=UNLOAD Feb 9 09:46:03.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit: BPF prog-id=45 op=LOAD Feb 9 09:46:03.164000 audit: BPF prog-id=32 op=UNLOAD Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit: BPF prog-id=46 op=LOAD Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.164000 audit: BPF prog-id=47 op=LOAD Feb 9 09:46:03.164000 audit: BPF prog-id=33 op=UNLOAD Feb 9 09:46:03.164000 audit: BPF prog-id=34 op=UNLOAD Feb 9 09:46:03.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.165000 audit: BPF prog-id=48 op=LOAD Feb 9 09:46:03.165000 audit: BPF prog-id=35 op=UNLOAD Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit: BPF prog-id=49 op=LOAD Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.170000 audit: BPF prog-id=50 op=LOAD Feb 9 09:46:03.170000 audit: BPF prog-id=21 op=UNLOAD Feb 9 09:46:03.171000 audit: BPF prog-id=22 op=UNLOAD Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit: BPF prog-id=51 op=LOAD Feb 9 09:46:03.173000 audit: BPF prog-id=29 op=UNLOAD Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.174000 audit: BPF prog-id=52 op=LOAD Feb 9 09:46:03.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.174000 audit: BPF prog-id=53 op=LOAD Feb 9 09:46:03.174000 audit: BPF prog-id=30 op=UNLOAD Feb 9 09:46:03.174000 audit: BPF prog-id=31 op=UNLOAD Feb 9 09:46:03.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:03.176000 audit: BPF prog-id=54 op=LOAD Feb 9 09:46:03.176000 audit: BPF prog-id=27 op=UNLOAD Feb 9 09:46:03.212375 systemd[1]: Started kubelet.service. Feb 9 09:46:03.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:03.352807 kubelet[2203]: E0209 09:46:03.352455 2203 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Feb 9 09:46:03.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 09:46:03.358769 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 9 09:46:03.359089 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 9 09:46:03.825763 env[1730]: time="2024-02-09T09:46:03.825655771Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.6\"" Feb 9 09:46:04.499228 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2820907331.mount: Deactivated successfully. Feb 9 09:46:07.359065 env[1730]: time="2024-02-09T09:46:07.358981030Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:07.363103 env[1730]: time="2024-02-09T09:46:07.363040950Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:68142d88471bf00b1317307442bd31edbbc7532061d623e85659df2d417308fb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:07.366939 env[1730]: time="2024-02-09T09:46:07.366890748Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:07.377577 env[1730]: time="2024-02-09T09:46:07.377505018Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:98a686df810b9f1de8e3b2ae869e79c51a36e7434d33c53f011852618aec0a68,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:07.380719 env[1730]: time="2024-02-09T09:46:07.380634301Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.6\" returns image reference \"sha256:68142d88471bf00b1317307442bd31edbbc7532061d623e85659df2d417308fb\"" Feb 9 09:46:07.397794 env[1730]: time="2024-02-09T09:46:07.397733428Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.6\"" Feb 9 09:46:09.014054 amazon-ssm-agent[1726]: 2024-02-09 09:46:09 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Feb 9 09:46:10.538901 env[1730]: time="2024-02-09T09:46:10.538831554Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:10.541990 env[1730]: time="2024-02-09T09:46:10.541930357Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8dbd4fd1241644100b94eb40a9d284c5cf08fa7f2d15cafdf1ca8cec8443b31f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:10.548066 env[1730]: time="2024-02-09T09:46:10.547985853Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:10.555250 env[1730]: time="2024-02-09T09:46:10.555176081Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:80bdcd72cfe26028bb2fed75732fc2f511c35fa8d1edc03deae11f3490713c9e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:10.556934 env[1730]: time="2024-02-09T09:46:10.556886864Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.6\" returns image reference \"sha256:8dbd4fd1241644100b94eb40a9d284c5cf08fa7f2d15cafdf1ca8cec8443b31f\"" Feb 9 09:46:10.574375 env[1730]: time="2024-02-09T09:46:10.574300150Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.6\"" Feb 9 09:46:12.435739 env[1730]: time="2024-02-09T09:46:12.435641745Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:12.438801 env[1730]: time="2024-02-09T09:46:12.438740534Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:541cddf10a6c9bb71f141eeefea4203714984b67ec3582fb4538058af9e43663,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:12.442021 env[1730]: time="2024-02-09T09:46:12.441961920Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:12.445635 env[1730]: time="2024-02-09T09:46:12.445561980Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:a89db556c34d652d403d909882dbd97336f2e935b1c726b2e2b2c0400186ac39,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:12.447312 env[1730]: time="2024-02-09T09:46:12.447262810Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.6\" returns image reference \"sha256:541cddf10a6c9bb71f141eeefea4203714984b67ec3582fb4538058af9e43663\"" Feb 9 09:46:12.465066 env[1730]: time="2024-02-09T09:46:12.465014820Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.6\"" Feb 9 09:46:13.555549 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Feb 9 09:46:13.555918 systemd[1]: Stopped kubelet.service. Feb 9 09:46:13.578508 kernel: kauditd_printk_skb: 292 callbacks suppressed Feb 9 09:46:13.578687 kernel: audit: type=1130 audit(1707471973.555:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:13.578763 kernel: audit: type=1131 audit(1707471973.555:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:13.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:13.555000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:13.559239 systemd[1]: Started kubelet.service. Feb 9 09:46:13.591079 kernel: audit: type=1130 audit(1707471973.558:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:13.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:13.696562 kubelet[2238]: E0209 09:46:13.696497 2238 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Feb 9 09:46:13.705635 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 9 09:46:13.705989 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 9 09:46:13.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 09:46:13.715780 kernel: audit: type=1131 audit(1707471973.705:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 09:46:13.791095 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4176963626.mount: Deactivated successfully. Feb 9 09:46:14.567879 env[1730]: time="2024-02-09T09:46:14.567799156Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:14.571645 env[1730]: time="2024-02-09T09:46:14.571584282Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2d8b4f784b5f439fa536676861ad1144130a981e5ac011d08829ed921477ec74,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:14.574365 env[1730]: time="2024-02-09T09:46:14.574306657Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:14.578299 env[1730]: time="2024-02-09T09:46:14.578239743Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:3898a1671ae42be1cd3c2e777549bc7b5b306b8da3a224b747365f6679fb902a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:14.579428 env[1730]: time="2024-02-09T09:46:14.579381122Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.6\" returns image reference \"sha256:2d8b4f784b5f439fa536676861ad1144130a981e5ac011d08829ed921477ec74\"" Feb 9 09:46:14.595954 env[1730]: time="2024-02-09T09:46:14.595882935Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Feb 9 09:46:15.128523 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1438000650.mount: Deactivated successfully. Feb 9 09:46:15.138804 env[1730]: time="2024-02-09T09:46:15.138741206Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:15.141601 env[1730]: time="2024-02-09T09:46:15.141543760Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:15.144448 env[1730]: time="2024-02-09T09:46:15.144390559Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:15.147188 env[1730]: time="2024-02-09T09:46:15.147140817Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:15.148213 env[1730]: time="2024-02-09T09:46:15.148171943Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Feb 9 09:46:15.165886 env[1730]: time="2024-02-09T09:46:15.165810682Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Feb 9 09:46:15.776049 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2237014238.mount: Deactivated successfully. Feb 9 09:46:21.698928 env[1730]: time="2024-02-09T09:46:21.698866132Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:21.701753 env[1730]: time="2024-02-09T09:46:21.701703999Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:21.706199 env[1730]: time="2024-02-09T09:46:21.706150978Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:21.710929 env[1730]: time="2024-02-09T09:46:21.710843182Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:21.713618 env[1730]: time="2024-02-09T09:46:21.713536856Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Feb 9 09:46:21.730345 env[1730]: time="2024-02-09T09:46:21.730295943Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Feb 9 09:46:22.247200 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2030239558.mount: Deactivated successfully. Feb 9 09:46:23.159604 env[1730]: time="2024-02-09T09:46:23.159545399Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:23.162996 env[1730]: time="2024-02-09T09:46:23.162948900Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:23.166006 env[1730]: time="2024-02-09T09:46:23.165945399Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:23.168771 env[1730]: time="2024-02-09T09:46:23.168690144Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:23.169943 env[1730]: time="2024-02-09T09:46:23.169900891Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Feb 9 09:46:23.716160 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Feb 9 09:46:23.717464 systemd[1]: Stopped kubelet.service. Feb 9 09:46:23.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:23.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:23.733825 kernel: audit: type=1130 audit(1707471983.716:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:23.733979 kernel: audit: type=1131 audit(1707471983.716:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:23.726850 systemd[1]: Started kubelet.service. Feb 9 09:46:23.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:23.742027 kernel: audit: type=1130 audit(1707471983.725:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:23.850716 kubelet[2282]: E0209 09:46:23.850612 2282 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Feb 9 09:46:23.855240 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 9 09:46:23.855557 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 9 09:46:23.855000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 09:46:23.864790 kernel: audit: type=1131 audit(1707471983.855:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 09:46:26.104566 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Feb 9 09:46:26.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:26.114958 kernel: audit: type=1131 audit(1707471986.104:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:26.129000 audit: BPF prog-id=47 op=UNLOAD Feb 9 09:46:26.129000 audit: BPF prog-id=46 op=UNLOAD Feb 9 09:46:26.135179 kernel: audit: type=1334 audit(1707471986.129:426): prog-id=47 op=UNLOAD Feb 9 09:46:26.135252 kernel: audit: type=1334 audit(1707471986.129:427): prog-id=46 op=UNLOAD Feb 9 09:46:26.129000 audit: BPF prog-id=45 op=UNLOAD Feb 9 09:46:26.137965 kernel: audit: type=1334 audit(1707471986.129:428): prog-id=45 op=UNLOAD Feb 9 09:46:29.635241 systemd[1]: Stopped kubelet.service. Feb 9 09:46:29.634000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:29.635000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:29.651931 kernel: audit: type=1130 audit(1707471989.634:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:29.652022 kernel: audit: type=1131 audit(1707471989.635:430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:29.678529 systemd[1]: Reloading. Feb 9 09:46:29.809664 /usr/lib/systemd/system-generators/torcx-generator[2354]: time="2024-02-09T09:46:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 09:46:29.809744 /usr/lib/systemd/system-generators/torcx-generator[2354]: time="2024-02-09T09:46:29Z" level=info msg="torcx already run" Feb 9 09:46:29.971348 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 09:46:29.971388 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 09:46:30.009437 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 09:46:30.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.186272 kernel: audit: type=1400 audit(1707471990.170:431): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.186371 kernel: audit: type=1400 audit(1707471990.170:432): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.193951 kernel: audit: type=1400 audit(1707471990.170:433): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.201619 kernel: audit: type=1400 audit(1707471990.170:434): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.209277 kernel: audit: type=1400 audit(1707471990.170:435): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.216915 kernel: audit: type=1400 audit(1707471990.170:436): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.216967 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Feb 9 09:46:30.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.226518 kernel: audit: type=1400 audit(1707471990.170:437): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.178000 audit: BPF prog-id=55 op=LOAD Feb 9 09:46:30.178000 audit: BPF prog-id=37 op=UNLOAD Feb 9 09:46:30.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit: BPF prog-id=56 op=LOAD Feb 9 09:46:30.185000 audit: BPF prog-id=38 op=UNLOAD Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit: BPF prog-id=57 op=LOAD Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.193000 audit: BPF prog-id=58 op=LOAD Feb 9 09:46:30.193000 audit: BPF prog-id=39 op=UNLOAD Feb 9 09:46:30.193000 audit: BPF prog-id=40 op=UNLOAD Feb 9 09:46:30.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.201000 audit: BPF prog-id=59 op=LOAD Feb 9 09:46:30.201000 audit: BPF prog-id=41 op=UNLOAD Feb 9 09:46:30.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.208000 audit: BPF prog-id=60 op=LOAD Feb 9 09:46:30.208000 audit: BPF prog-id=42 op=UNLOAD Feb 9 09:46:30.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.227000 audit: BPF prog-id=63 op=LOAD Feb 9 09:46:30.227000 audit: BPF prog-id=48 op=UNLOAD Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit: BPF prog-id=64 op=LOAD Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.232000 audit: BPF prog-id=65 op=LOAD Feb 9 09:46:30.232000 audit: BPF prog-id=49 op=UNLOAD Feb 9 09:46:30.232000 audit: BPF prog-id=50 op=UNLOAD Feb 9 09:46:30.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit: BPF prog-id=66 op=LOAD Feb 9 09:46:30.235000 audit: BPF prog-id=51 op=UNLOAD Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit: BPF prog-id=67 op=LOAD Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.235000 audit: BPF prog-id=68 op=LOAD Feb 9 09:46:30.235000 audit: BPF prog-id=52 op=UNLOAD Feb 9 09:46:30.235000 audit: BPF prog-id=53 op=UNLOAD Feb 9 09:46:30.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:30.237000 audit: BPF prog-id=69 op=LOAD Feb 9 09:46:30.237000 audit: BPF prog-id=54 op=UNLOAD Feb 9 09:46:30.269862 systemd[1]: Started kubelet.service. Feb 9 09:46:30.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:30.361307 kubelet[2409]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 09:46:30.361874 kubelet[2409]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 9 09:46:30.361972 kubelet[2409]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 09:46:30.362231 kubelet[2409]: I0209 09:46:30.362174 2409 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 9 09:46:31.481555 kubelet[2409]: I0209 09:46:31.481509 2409 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Feb 9 09:46:31.482254 kubelet[2409]: I0209 09:46:31.482226 2409 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 9 09:46:31.482757 kubelet[2409]: I0209 09:46:31.482733 2409 server.go:895] "Client rotation is on, will bootstrap in background" Feb 9 09:46:31.491255 kubelet[2409]: I0209 09:46:31.491204 2409 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 9 09:46:31.492009 kubelet[2409]: E0209 09:46:31.491795 2409 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.17.0:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:31.504781 kubelet[2409]: W0209 09:46:31.504741 2409 machine.go:65] Cannot read vendor id correctly, set empty. Feb 9 09:46:31.506379 kubelet[2409]: I0209 09:46:31.506331 2409 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 9 09:46:31.507044 kubelet[2409]: I0209 09:46:31.506983 2409 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 9 09:46:31.507443 kubelet[2409]: I0209 09:46:31.507401 2409 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Feb 9 09:46:31.507619 kubelet[2409]: I0209 09:46:31.507471 2409 topology_manager.go:138] "Creating topology manager with none policy" Feb 9 09:46:31.507619 kubelet[2409]: I0209 09:46:31.507493 2409 container_manager_linux.go:301] "Creating device plugin manager" Feb 9 09:46:31.507813 kubelet[2409]: I0209 09:46:31.507786 2409 state_mem.go:36] "Initialized new in-memory state store" Feb 9 09:46:31.508122 kubelet[2409]: I0209 09:46:31.508065 2409 kubelet.go:393] "Attempting to sync node with API server" Feb 9 09:46:31.508191 kubelet[2409]: I0209 09:46:31.508123 2409 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 9 09:46:31.508191 kubelet[2409]: I0209 09:46:31.508179 2409 kubelet.go:309] "Adding apiserver pod source" Feb 9 09:46:31.508308 kubelet[2409]: I0209 09:46:31.508213 2409 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 9 09:46:31.509703 kubelet[2409]: W0209 09:46:31.509601 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.17.0:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:31.509864 kubelet[2409]: E0209 09:46:31.509697 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.17.0:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:31.510443 kubelet[2409]: W0209 09:46:31.510373 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.17.0:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-17-0&limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:31.510562 kubelet[2409]: E0209 09:46:31.510477 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.17.0:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-17-0&limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:31.510718 kubelet[2409]: I0209 09:46:31.510658 2409 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 9 09:46:31.511200 kubelet[2409]: W0209 09:46:31.511157 2409 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Feb 9 09:46:31.512613 kubelet[2409]: I0209 09:46:31.512556 2409 server.go:1232] "Started kubelet" Feb 9 09:46:31.513000 audit[2409]: AVC avc: denied { mac_admin } for pid=2409 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:31.513000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 09:46:31.513000 audit[2409]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000aced50 a1=4000921350 a2=4000aced20 a3=25 items=0 ppid=1 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.513000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 09:46:31.513000 audit[2409]: AVC avc: denied { mac_admin } for pid=2409 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:31.513000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 09:46:31.513000 audit[2409]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000db9fe0 a1=4000921368 a2=4000acede0 a3=25 items=0 ppid=1 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.513000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 09:46:31.516063 kubelet[2409]: I0209 09:46:31.515369 2409 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 9 09:46:31.516063 kubelet[2409]: I0209 09:46:31.515486 2409 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 9 09:46:31.516063 kubelet[2409]: I0209 09:46:31.515601 2409 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 9 09:46:31.519334 kubelet[2409]: E0209 09:46:31.519137 2409 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-17-0.17b228bace0863c8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-17-0", UID:"ip-172-31-17-0", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-17-0"}, FirstTimestamp:time.Date(2024, time.February, 9, 9, 46, 31, 512523720, time.Local), LastTimestamp:time.Date(2024, time.February, 9, 9, 46, 31, 512523720, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-17-0"}': 'Post "https://172.31.17.0:6443/api/v1/namespaces/default/events": dial tcp 172.31.17.0:6443: connect: connection refused'(may retry after sleeping) Feb 9 09:46:31.519972 kubelet[2409]: E0209 09:46:31.519935 2409 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 9 09:46:31.520164 kubelet[2409]: E0209 09:46:31.520142 2409 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 9 09:46:31.524136 kubelet[2409]: I0209 09:46:31.524095 2409 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 9 09:46:31.522000 audit[2419]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:31.522000 audit[2419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc63e96d0 a2=0 a3=1 items=0 ppid=2409 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.522000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 9 09:46:31.525823 kubelet[2409]: I0209 09:46:31.525784 2409 server.go:462] "Adding debug handlers to kubelet server" Feb 9 09:46:31.524000 audit[2420]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:31.524000 audit[2420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffccab4950 a2=0 a3=1 items=0 ppid=2409 pid=2420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.524000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 9 09:46:31.528268 kubelet[2409]: I0209 09:46:31.528224 2409 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 9 09:46:31.528535 kubelet[2409]: I0209 09:46:31.528487 2409 volume_manager.go:291] "Starting Kubelet Volume Manager" Feb 9 09:46:31.528933 kubelet[2409]: I0209 09:46:31.528905 2409 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Feb 9 09:46:31.531093 kubelet[2409]: E0209 09:46:31.531054 2409 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.17.0:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-0?timeout=10s\": dial tcp 172.31.17.0:6443: connect: connection refused" interval="200ms" Feb 9 09:46:31.529000 audit[2422]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:31.529000 audit[2422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe32c1c00 a2=0 a3=1 items=0 ppid=2409 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.529000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 09:46:31.534578 kubelet[2409]: I0209 09:46:31.534342 2409 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Feb 9 09:46:31.534578 kubelet[2409]: I0209 09:46:31.534523 2409 reconciler_new.go:29] "Reconciler: start to sync state" Feb 9 09:46:31.534000 audit[2424]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:31.534000 audit[2424]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe2d5a300 a2=0 a3=1 items=0 ppid=2409 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.534000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 09:46:31.539248 kubelet[2409]: W0209 09:46:31.539142 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.17.0:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:31.539248 kubelet[2409]: E0209 09:46:31.539249 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.17.0:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:31.552000 audit[2428]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:31.552000 audit[2428]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffffb627920 a2=0 a3=1 items=0 ppid=2409 pid=2428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.552000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Feb 9 09:46:31.555651 kubelet[2409]: I0209 09:46:31.555144 2409 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Feb 9 09:46:31.555000 audit[2429]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2429 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:31.555000 audit[2429]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdf0c67d0 a2=0 a3=1 items=0 ppid=2409 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.555000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 9 09:46:31.557343 kubelet[2409]: I0209 09:46:31.557305 2409 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Feb 9 09:46:31.557420 kubelet[2409]: I0209 09:46:31.557349 2409 status_manager.go:217] "Starting to sync pod status with apiserver" Feb 9 09:46:31.557420 kubelet[2409]: I0209 09:46:31.557381 2409 kubelet.go:2303] "Starting kubelet main sync loop" Feb 9 09:46:31.557525 kubelet[2409]: E0209 09:46:31.557464 2409 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 9 09:46:31.557000 audit[2430]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:31.557000 audit[2430]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffec44dda0 a2=0 a3=1 items=0 ppid=2409 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.557000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 9 09:46:31.559000 audit[2431]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=2431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:31.559000 audit[2431]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc38a2f90 a2=0 a3=1 items=0 ppid=2409 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.559000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 9 09:46:31.561000 audit[2432]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=2432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:31.561000 audit[2432]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd0890540 a2=0 a3=1 items=0 ppid=2409 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.561000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 9 09:46:31.563000 audit[2433]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=2433 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:31.563000 audit[2433]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe6b7afc0 a2=0 a3=1 items=0 ppid=2409 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.563000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 9 09:46:31.565000 audit[2434]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=2434 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:31.565000 audit[2434]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffe3c90200 a2=0 a3=1 items=0 ppid=2409 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.565000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 9 09:46:31.566000 audit[2435]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2435 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:31.566000 audit[2435]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe0229310 a2=0 a3=1 items=0 ppid=2409 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.566000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 9 09:46:31.575092 kubelet[2409]: W0209 09:46:31.574979 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.17.0:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:31.575238 kubelet[2409]: E0209 09:46:31.575124 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.17.0:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:31.602576 kubelet[2409]: I0209 09:46:31.602519 2409 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 9 09:46:31.602576 kubelet[2409]: I0209 09:46:31.602564 2409 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 9 09:46:31.602831 kubelet[2409]: I0209 09:46:31.602598 2409 state_mem.go:36] "Initialized new in-memory state store" Feb 9 09:46:31.606201 kubelet[2409]: I0209 09:46:31.606151 2409 policy_none.go:49] "None policy: Start" Feb 9 09:46:31.607561 kubelet[2409]: I0209 09:46:31.607529 2409 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 9 09:46:31.607748 kubelet[2409]: I0209 09:46:31.607727 2409 state_mem.go:35] "Initializing new in-memory state store" Feb 9 09:46:31.617400 systemd[1]: Created slice kubepods.slice. Feb 9 09:46:31.627334 systemd[1]: Created slice kubepods-burstable.slice. Feb 9 09:46:31.631442 kubelet[2409]: I0209 09:46:31.631385 2409 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-17-0" Feb 9 09:46:31.632111 kubelet[2409]: E0209 09:46:31.632066 2409 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.17.0:6443/api/v1/nodes\": dial tcp 172.31.17.0:6443: connect: connection refused" node="ip-172-31-17-0" Feb 9 09:46:31.635934 systemd[1]: Created slice kubepods-besteffort.slice. Feb 9 09:46:31.643206 kubelet[2409]: I0209 09:46:31.643151 2409 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 9 09:46:31.641000 audit[2409]: AVC avc: denied { mac_admin } for pid=2409 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:31.641000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 09:46:31.641000 audit[2409]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b0d380 a1=4000946e40 a2=4000b0d350 a3=25 items=0 ppid=1 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:31.641000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 09:46:31.643800 kubelet[2409]: I0209 09:46:31.643374 2409 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 9 09:46:31.643872 kubelet[2409]: I0209 09:46:31.643847 2409 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 9 09:46:31.648062 kubelet[2409]: E0209 09:46:31.648004 2409 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-17-0\" not found" Feb 9 09:46:31.657815 kubelet[2409]: I0209 09:46:31.657763 2409 topology_manager.go:215] "Topology Admit Handler" podUID="f97c52b9262b56677d886a9a5cde61a6" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-17-0" Feb 9 09:46:31.659925 kubelet[2409]: I0209 09:46:31.659892 2409 topology_manager.go:215] "Topology Admit Handler" podUID="87b812e977d9093c2a1cf86e60dc6bb8" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-17-0" Feb 9 09:46:31.663031 kubelet[2409]: I0209 09:46:31.662983 2409 topology_manager.go:215] "Topology Admit Handler" podUID="0a9dc061c3c5f69e45ac0a10eb97278c" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-17-0" Feb 9 09:46:31.674926 systemd[1]: Created slice kubepods-burstable-podf97c52b9262b56677d886a9a5cde61a6.slice. Feb 9 09:46:31.693371 systemd[1]: Created slice kubepods-burstable-pod87b812e977d9093c2a1cf86e60dc6bb8.slice. Feb 9 09:46:31.706936 systemd[1]: Created slice kubepods-burstable-pod0a9dc061c3c5f69e45ac0a10eb97278c.slice. Feb 9 09:46:31.732949 kubelet[2409]: E0209 09:46:31.732806 2409 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.17.0:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-0?timeout=10s\": dial tcp 172.31.17.0:6443: connect: connection refused" interval="400ms" Feb 9 09:46:31.737268 kubelet[2409]: I0209 09:46:31.737227 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/87b812e977d9093c2a1cf86e60dc6bb8-ca-certs\") pod \"kube-controller-manager-ip-172-31-17-0\" (UID: \"87b812e977d9093c2a1cf86e60dc6bb8\") " pod="kube-system/kube-controller-manager-ip-172-31-17-0" Feb 9 09:46:31.737423 kubelet[2409]: I0209 09:46:31.737302 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/87b812e977d9093c2a1cf86e60dc6bb8-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-17-0\" (UID: \"87b812e977d9093c2a1cf86e60dc6bb8\") " pod="kube-system/kube-controller-manager-ip-172-31-17-0" Feb 9 09:46:31.737423 kubelet[2409]: I0209 09:46:31.737353 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f97c52b9262b56677d886a9a5cde61a6-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-17-0\" (UID: \"f97c52b9262b56677d886a9a5cde61a6\") " pod="kube-system/kube-apiserver-ip-172-31-17-0" Feb 9 09:46:31.737423 kubelet[2409]: I0209 09:46:31.737399 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/87b812e977d9093c2a1cf86e60dc6bb8-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-17-0\" (UID: \"87b812e977d9093c2a1cf86e60dc6bb8\") " pod="kube-system/kube-controller-manager-ip-172-31-17-0" Feb 9 09:46:31.737603 kubelet[2409]: I0209 09:46:31.737442 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/87b812e977d9093c2a1cf86e60dc6bb8-k8s-certs\") pod \"kube-controller-manager-ip-172-31-17-0\" (UID: \"87b812e977d9093c2a1cf86e60dc6bb8\") " pod="kube-system/kube-controller-manager-ip-172-31-17-0" Feb 9 09:46:31.737603 kubelet[2409]: I0209 09:46:31.737502 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/87b812e977d9093c2a1cf86e60dc6bb8-kubeconfig\") pod \"kube-controller-manager-ip-172-31-17-0\" (UID: \"87b812e977d9093c2a1cf86e60dc6bb8\") " pod="kube-system/kube-controller-manager-ip-172-31-17-0" Feb 9 09:46:31.737603 kubelet[2409]: I0209 09:46:31.737545 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/0a9dc061c3c5f69e45ac0a10eb97278c-kubeconfig\") pod \"kube-scheduler-ip-172-31-17-0\" (UID: \"0a9dc061c3c5f69e45ac0a10eb97278c\") " pod="kube-system/kube-scheduler-ip-172-31-17-0" Feb 9 09:46:31.737603 kubelet[2409]: I0209 09:46:31.737589 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f97c52b9262b56677d886a9a5cde61a6-ca-certs\") pod \"kube-apiserver-ip-172-31-17-0\" (UID: \"f97c52b9262b56677d886a9a5cde61a6\") " pod="kube-system/kube-apiserver-ip-172-31-17-0" Feb 9 09:46:31.737853 kubelet[2409]: I0209 09:46:31.737640 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f97c52b9262b56677d886a9a5cde61a6-k8s-certs\") pod \"kube-apiserver-ip-172-31-17-0\" (UID: \"f97c52b9262b56677d886a9a5cde61a6\") " pod="kube-system/kube-apiserver-ip-172-31-17-0" Feb 9 09:46:31.835224 kubelet[2409]: I0209 09:46:31.835170 2409 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-17-0" Feb 9 09:46:31.836013 kubelet[2409]: E0209 09:46:31.835986 2409 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.17.0:6443/api/v1/nodes\": dial tcp 172.31.17.0:6443: connect: connection refused" node="ip-172-31-17-0" Feb 9 09:46:31.991358 env[1730]: time="2024-02-09T09:46:31.991196291Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-17-0,Uid:f97c52b9262b56677d886a9a5cde61a6,Namespace:kube-system,Attempt:0,}" Feb 9 09:46:32.004452 env[1730]: time="2024-02-09T09:46:32.004085509Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-17-0,Uid:87b812e977d9093c2a1cf86e60dc6bb8,Namespace:kube-system,Attempt:0,}" Feb 9 09:46:32.012007 env[1730]: time="2024-02-09T09:46:32.011926889Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-17-0,Uid:0a9dc061c3c5f69e45ac0a10eb97278c,Namespace:kube-system,Attempt:0,}" Feb 9 09:46:32.133705 kubelet[2409]: E0209 09:46:32.133646 2409 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.17.0:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-0?timeout=10s\": dial tcp 172.31.17.0:6443: connect: connection refused" interval="800ms" Feb 9 09:46:32.239145 kubelet[2409]: I0209 09:46:32.238363 2409 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-17-0" Feb 9 09:46:32.239145 kubelet[2409]: E0209 09:46:32.239092 2409 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.17.0:6443/api/v1/nodes\": dial tcp 172.31.17.0:6443: connect: connection refused" node="ip-172-31-17-0" Feb 9 09:46:32.506408 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2810609174.mount: Deactivated successfully. Feb 9 09:46:32.517475 env[1730]: time="2024-02-09T09:46:32.517401440Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:32.527280 env[1730]: time="2024-02-09T09:46:32.527190485Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:32.531145 env[1730]: time="2024-02-09T09:46:32.531085169Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:32.532554 env[1730]: time="2024-02-09T09:46:32.532499295Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:32.538519 env[1730]: time="2024-02-09T09:46:32.538458412Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:32.540405 env[1730]: time="2024-02-09T09:46:32.540342644Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:32.544375 env[1730]: time="2024-02-09T09:46:32.544318715Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:32.546558 env[1730]: time="2024-02-09T09:46:32.546499303Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:32.547889 kubelet[2409]: W0209 09:46:32.547801 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.17.0:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:32.547889 kubelet[2409]: E0209 09:46:32.547895 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.17.0:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:32.550668 env[1730]: time="2024-02-09T09:46:32.550599694Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:32.552167 env[1730]: time="2024-02-09T09:46:32.552126132Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:32.557835 env[1730]: time="2024-02-09T09:46:32.557768946Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:32.562022 env[1730]: time="2024-02-09T09:46:32.561953824Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:32.630440 env[1730]: time="2024-02-09T09:46:32.630317502Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:46:32.630440 env[1730]: time="2024-02-09T09:46:32.630390098Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:46:32.630706 env[1730]: time="2024-02-09T09:46:32.630417120Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:46:32.630812 env[1730]: time="2024-02-09T09:46:32.630669400Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3c8033b48fc534a16d93815af8e7c023ac9e9f83a31652861fac03392c5ea4d5 pid=2446 runtime=io.containerd.runc.v2 Feb 9 09:46:32.645128 env[1730]: time="2024-02-09T09:46:32.644774886Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:46:32.645128 env[1730]: time="2024-02-09T09:46:32.644851830Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:46:32.645128 env[1730]: time="2024-02-09T09:46:32.644896433Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:46:32.646029 env[1730]: time="2024-02-09T09:46:32.645741471Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5461c26f30c3b00fc856c0780a79be93db4ce93e3b40d24a6fe13f110a77dcec pid=2463 runtime=io.containerd.runc.v2 Feb 9 09:46:32.647594 env[1730]: time="2024-02-09T09:46:32.647446980Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:46:32.647594 env[1730]: time="2024-02-09T09:46:32.647526855Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:46:32.647957 env[1730]: time="2024-02-09T09:46:32.647865531Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:46:32.649472 env[1730]: time="2024-02-09T09:46:32.649046963Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/07d79def4d72e1cf665fa4b3c167792236870ddb2964e8d5fb66426b995516a5 pid=2468 runtime=io.containerd.runc.v2 Feb 9 09:46:32.656986 kubelet[2409]: W0209 09:46:32.656924 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.17.0:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:32.656986 kubelet[2409]: E0209 09:46:32.656994 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.17.0:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:32.669135 systemd[1]: Started cri-containerd-3c8033b48fc534a16d93815af8e7c023ac9e9f83a31652861fac03392c5ea4d5.scope. Feb 9 09:46:32.704902 systemd[1]: Started cri-containerd-5461c26f30c3b00fc856c0780a79be93db4ce93e3b40d24a6fe13f110a77dcec.scope. Feb 9 09:46:32.720626 systemd[1]: Started cri-containerd-07d79def4d72e1cf665fa4b3c167792236870ddb2964e8d5fb66426b995516a5.scope. Feb 9 09:46:32.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.745000 audit: BPF prog-id=70 op=LOAD Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2463 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363163323666333063336230306663383536633037383061373962 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2463 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363163323666333063336230306663383536633037383061373962 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit: BPF prog-id=71 op=LOAD Feb 9 09:46:32.747000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2463 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363163323666333063336230306663383536633037383061373962 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.747000 audit: BPF prog-id=72 op=LOAD Feb 9 09:46:32.747000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2463 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363163323666333063336230306663383536633037383061373962 Feb 9 09:46:32.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.752000 audit: BPF prog-id=73 op=LOAD Feb 9 09:46:32.754373 kubelet[2409]: E0209 09:46:32.750960 2409 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-17-0.17b228bace0863c8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-17-0", UID:"ip-172-31-17-0", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-17-0"}, FirstTimestamp:time.Date(2024, time.February, 9, 9, 46, 31, 512523720, time.Local), LastTimestamp:time.Date(2024, time.February, 9, 9, 46, 31, 512523720, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-17-0"}': 'Post "https://172.31.17.0:6443/api/v1/namespaces/default/events": dial tcp 172.31.17.0:6443: connect: connection refused'(may retry after sleeping) Feb 9 09:46:32.754000 audit: BPF prog-id=72 op=UNLOAD Feb 9 09:46:32.754000 audit: BPF prog-id=71 op=UNLOAD Feb 9 09:46:32.754000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.754000 audit[2471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2446 pid=2471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363383033336234386663353334613136643933383135616638653763 Feb 9 09:46:32.754000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.754000 audit[2471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2446 pid=2471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363383033336234386663353334613136643933383135616638653763 Feb 9 09:46:32.754000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.754000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.754000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.754000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.754000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.754000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.754000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.754000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.754000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.754000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.754000 audit: BPF prog-id=74 op=LOAD Feb 9 09:46:32.754000 audit[2471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2446 pid=2471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363383033336234386663353334613136643933383135616638653763 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit: BPF prog-id=75 op=LOAD Feb 9 09:46:32.755000 audit[2471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2446 pid=2471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363383033336234386663353334613136643933383135616638653763 Feb 9 09:46:32.755000 audit: BPF prog-id=75 op=UNLOAD Feb 9 09:46:32.755000 audit: BPF prog-id=74 op=UNLOAD Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { perfmon } for pid=2471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit[2471]: AVC avc: denied { bpf } for pid=2471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.755000 audit: BPF prog-id=76 op=LOAD Feb 9 09:46:32.755000 audit[2471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2446 pid=2471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363383033336234386663353334613136643933383135616638653763 Feb 9 09:46:32.763000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.763000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.763000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.763000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.763000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.763000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.763000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.763000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.763000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.763000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.763000 audit: BPF prog-id=77 op=LOAD Feb 9 09:46:32.763000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2463 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363163323666333063336230306663383536633037383061373962 Feb 9 09:46:32.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.783000 audit: BPF prog-id=78 op=LOAD Feb 9 09:46:32.785000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.785000 audit[2496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2468 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037643739646566346437326531636636363566613462336331363737 Feb 9 09:46:32.785000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.785000 audit[2496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2468 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037643739646566346437326531636636363566613462336331363737 Feb 9 09:46:32.786000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.786000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.786000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.786000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.786000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.786000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.786000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.786000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.786000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.786000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.786000 audit: BPF prog-id=79 op=LOAD Feb 9 09:46:32.786000 audit[2496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2468 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037643739646566346437326531636636363566613462336331363737 Feb 9 09:46:32.787000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.787000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.787000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.787000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.787000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.787000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.787000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.787000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.787000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.787000 audit: BPF prog-id=80 op=LOAD Feb 9 09:46:32.787000 audit[2496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2468 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037643739646566346437326531636636363566613462336331363737 Feb 9 09:46:32.788000 audit: BPF prog-id=80 op=UNLOAD Feb 9 09:46:32.789000 audit: BPF prog-id=79 op=UNLOAD Feb 9 09:46:32.789000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.789000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.789000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.789000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.789000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.789000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.789000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.789000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.789000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.789000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.789000 audit: BPF prog-id=81 op=LOAD Feb 9 09:46:32.789000 audit[2496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2468 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.789000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037643739646566346437326531636636363566613462336331363737 Feb 9 09:46:32.825760 env[1730]: time="2024-02-09T09:46:32.825599639Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-17-0,Uid:f97c52b9262b56677d886a9a5cde61a6,Namespace:kube-system,Attempt:0,} returns sandbox id \"5461c26f30c3b00fc856c0780a79be93db4ce93e3b40d24a6fe13f110a77dcec\"" Feb 9 09:46:32.837035 env[1730]: time="2024-02-09T09:46:32.836836653Z" level=info msg="CreateContainer within sandbox \"5461c26f30c3b00fc856c0780a79be93db4ce93e3b40d24a6fe13f110a77dcec\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Feb 9 09:46:32.863056 env[1730]: time="2024-02-09T09:46:32.862987047Z" level=info msg="CreateContainer within sandbox \"5461c26f30c3b00fc856c0780a79be93db4ce93e3b40d24a6fe13f110a77dcec\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"1ca0403cba1f088827166f57b0939199ef29664035c0226e06011a103d3817c8\"" Feb 9 09:46:32.865492 kubelet[2409]: W0209 09:46:32.865351 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.17.0:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-17-0&limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:32.865492 kubelet[2409]: E0209 09:46:32.865457 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.17.0:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-17-0&limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:32.871219 env[1730]: time="2024-02-09T09:46:32.870995645Z" level=info msg="StartContainer for \"1ca0403cba1f088827166f57b0939199ef29664035c0226e06011a103d3817c8\"" Feb 9 09:46:32.893507 env[1730]: time="2024-02-09T09:46:32.893337245Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-17-0,Uid:0a9dc061c3c5f69e45ac0a10eb97278c,Namespace:kube-system,Attempt:0,} returns sandbox id \"3c8033b48fc534a16d93815af8e7c023ac9e9f83a31652861fac03392c5ea4d5\"" Feb 9 09:46:32.897195 env[1730]: time="2024-02-09T09:46:32.897131231Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-17-0,Uid:87b812e977d9093c2a1cf86e60dc6bb8,Namespace:kube-system,Attempt:0,} returns sandbox id \"07d79def4d72e1cf665fa4b3c167792236870ddb2964e8d5fb66426b995516a5\"" Feb 9 09:46:32.906744 env[1730]: time="2024-02-09T09:46:32.906642007Z" level=info msg="CreateContainer within sandbox \"07d79def4d72e1cf665fa4b3c167792236870ddb2964e8d5fb66426b995516a5\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Feb 9 09:46:32.908984 env[1730]: time="2024-02-09T09:46:32.908914490Z" level=info msg="CreateContainer within sandbox \"3c8033b48fc534a16d93815af8e7c023ac9e9f83a31652861fac03392c5ea4d5\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Feb 9 09:46:32.929324 systemd[1]: Started cri-containerd-1ca0403cba1f088827166f57b0939199ef29664035c0226e06011a103d3817c8.scope. Feb 9 09:46:32.934621 kubelet[2409]: E0209 09:46:32.934144 2409 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.17.0:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-0?timeout=10s\": dial tcp 172.31.17.0:6443: connect: connection refused" interval="1.6s" Feb 9 09:46:32.946657 env[1730]: time="2024-02-09T09:46:32.946587901Z" level=info msg="CreateContainer within sandbox \"07d79def4d72e1cf665fa4b3c167792236870ddb2964e8d5fb66426b995516a5\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"814fcc84ff24f072dbe6931f41a76f05ded4567fb1a5ae1863d44ee37eedab08\"" Feb 9 09:46:32.947655 env[1730]: time="2024-02-09T09:46:32.947610318Z" level=info msg="StartContainer for \"814fcc84ff24f072dbe6931f41a76f05ded4567fb1a5ae1863d44ee37eedab08\"" Feb 9 09:46:32.963962 env[1730]: time="2024-02-09T09:46:32.963898528Z" level=info msg="CreateContainer within sandbox \"3c8033b48fc534a16d93815af8e7c023ac9e9f83a31652861fac03392c5ea4d5\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"4c36ba4a03d51866e8d536d06a91efd7cf41e492801d67c33ac87cbb77a3e8db\"" Feb 9 09:46:32.964876 env[1730]: time="2024-02-09T09:46:32.964829602Z" level=info msg="StartContainer for \"4c36ba4a03d51866e8d536d06a91efd7cf41e492801d67c33ac87cbb77a3e8db\"" Feb 9 09:46:32.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.963000 audit: BPF prog-id=82 op=LOAD Feb 9 09:46:32.966000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.966000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2463 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163613034303363626131663038383832373136366635376230393339 Feb 9 09:46:32.967000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.967000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2463 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163613034303363626131663038383832373136366635376230393339 Feb 9 09:46:32.967000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.967000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.967000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.967000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.967000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.967000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.967000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.967000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.967000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.967000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.967000 audit: BPF prog-id=83 op=LOAD Feb 9 09:46:32.967000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2463 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163613034303363626131663038383832373136366635376230393339 Feb 9 09:46:32.969000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.969000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.969000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.969000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.969000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.969000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.969000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.969000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.969000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.969000 audit: BPF prog-id=84 op=LOAD Feb 9 09:46:32.969000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2463 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163613034303363626131663038383832373136366635376230393339 Feb 9 09:46:32.971000 audit: BPF prog-id=84 op=UNLOAD Feb 9 09:46:32.971000 audit: BPF prog-id=83 op=UNLOAD Feb 9 09:46:32.971000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.971000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.971000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.971000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.971000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.971000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.971000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.971000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.971000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.971000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:32.971000 audit: BPF prog-id=85 op=LOAD Feb 9 09:46:32.971000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2463 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:32.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163613034303363626131663038383832373136366635376230393339 Feb 9 09:46:33.006055 systemd[1]: Started cri-containerd-814fcc84ff24f072dbe6931f41a76f05ded4567fb1a5ae1863d44ee37eedab08.scope. Feb 9 09:46:33.015769 kubelet[2409]: W0209 09:46:33.013959 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.17.0:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:33.015769 kubelet[2409]: E0209 09:46:33.014027 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.17.0:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.17.0:6443: connect: connection refused Feb 9 09:46:33.042154 kubelet[2409]: I0209 09:46:33.042107 2409 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-17-0" Feb 9 09:46:33.042634 kubelet[2409]: E0209 09:46:33.042594 2409 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.17.0:6443/api/v1/nodes\": dial tcp 172.31.17.0:6443: connect: connection refused" node="ip-172-31-17-0" Feb 9 09:46:33.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.067000 audit: BPF prog-id=86 op=LOAD Feb 9 09:46:33.078999 systemd[1]: Started cri-containerd-4c36ba4a03d51866e8d536d06a91efd7cf41e492801d67c33ac87cbb77a3e8db.scope. Feb 9 09:46:33.081000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.081000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2468 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:33.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831346663633834666632346630373264626536393331663431613736 Feb 9 09:46:33.082000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.082000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2468 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:33.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831346663633834666632346630373264626536393331663431613736 Feb 9 09:46:33.083000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.083000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.083000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.083000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.083000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.083000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.083000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.083000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.083000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.083000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.083000 audit: BPF prog-id=87 op=LOAD Feb 9 09:46:33.083000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2468 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:33.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831346663633834666632346630373264626536393331663431613736 Feb 9 09:46:33.085000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.085000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.085000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.085000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.085000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.085000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.085000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.085000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.085000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.085000 audit: BPF prog-id=88 op=LOAD Feb 9 09:46:33.085000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2468 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:33.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831346663633834666632346630373264626536393331663431613736 Feb 9 09:46:33.086000 audit: BPF prog-id=88 op=UNLOAD Feb 9 09:46:33.086000 audit: BPF prog-id=87 op=UNLOAD Feb 9 09:46:33.086000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.086000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.086000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.086000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.086000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.086000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.086000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.086000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.086000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.086000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.086000 audit: BPF prog-id=89 op=LOAD Feb 9 09:46:33.086000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2468 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:33.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831346663633834666632346630373264626536393331663431613736 Feb 9 09:46:33.092265 env[1730]: time="2024-02-09T09:46:33.092210997Z" level=info msg="StartContainer for \"1ca0403cba1f088827166f57b0939199ef29664035c0226e06011a103d3817c8\" returns successfully" Feb 9 09:46:33.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.120000 audit: BPF prog-id=90 op=LOAD Feb 9 09:46:33.121000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.121000 audit[2612]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2446 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:33.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463333662613461303364353138363665386435333664303661393165 Feb 9 09:46:33.121000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.121000 audit[2612]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2446 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:33.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463333662613461303364353138363665386435333664303661393165 Feb 9 09:46:33.121000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.121000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.121000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.121000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.121000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.121000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.121000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.121000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.121000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.121000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.121000 audit: BPF prog-id=91 op=LOAD Feb 9 09:46:33.121000 audit[2612]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2446 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:33.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463333662613461303364353138363665386435333664303661393165 Feb 9 09:46:33.123000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.123000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.123000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.123000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.123000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.123000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.123000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.123000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.123000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.123000 audit: BPF prog-id=92 op=LOAD Feb 9 09:46:33.123000 audit[2612]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2446 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:33.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463333662613461303364353138363665386435333664303661393165 Feb 9 09:46:33.124000 audit: BPF prog-id=92 op=UNLOAD Feb 9 09:46:33.124000 audit: BPF prog-id=91 op=UNLOAD Feb 9 09:46:33.125000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.125000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.125000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.125000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.125000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.125000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.125000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.125000 audit[2612]: AVC avc: denied { perfmon } for pid=2612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.125000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.125000 audit[2612]: AVC avc: denied { bpf } for pid=2612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:33.125000 audit: BPF prog-id=93 op=LOAD Feb 9 09:46:33.125000 audit[2612]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2446 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:33.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463333662613461303364353138363665386435333664303661393165 Feb 9 09:46:33.200578 env[1730]: time="2024-02-09T09:46:33.200504067Z" level=info msg="StartContainer for \"814fcc84ff24f072dbe6931f41a76f05ded4567fb1a5ae1863d44ee37eedab08\" returns successfully" Feb 9 09:46:33.215094 env[1730]: time="2024-02-09T09:46:33.215029127Z" level=info msg="StartContainer for \"4c36ba4a03d51866e8d536d06a91efd7cf41e492801d67c33ac87cbb77a3e8db\" returns successfully" Feb 9 09:46:34.644663 kubelet[2409]: I0209 09:46:34.644627 2409 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-17-0" Feb 9 09:46:35.603862 kernel: kauditd_printk_skb: 595 callbacks suppressed Feb 9 09:46:35.604049 kernel: audit: type=1400 audit(1707471995.590:707): avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:35.590000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:35.590000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:35.619626 kernel: audit: type=1400 audit(1707471995.590:708): avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:35.590000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000192fa0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:46:35.637252 kernel: audit: type=1300 audit(1707471995.590:708): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000192fa0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:46:35.590000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:46:35.648188 kernel: audit: type=1327 audit(1707471995.590:708): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:46:35.590000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000074ae0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:46:35.590000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:46:35.672891 kernel: audit: type=1300 audit(1707471995.590:707): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000074ae0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:46:35.673099 kernel: audit: type=1327 audit(1707471995.590:707): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:46:36.910000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:36.943547 kernel: audit: type=1400 audit(1707471996.910:709): avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:36.945530 kernel: audit: type=1400 audit(1707471996.918:710): avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:36.918000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:36.918000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4004cdb890 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:46:36.964878 kernel: audit: type=1300 audit(1707471996.918:710): arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4004cdb890 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:46:36.918000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:46:36.976978 kernel: audit: type=1327 audit(1707471996.918:710): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:46:36.921000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:36.921000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400348a450 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:46:36.921000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:46:36.910000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4006ed5770 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:46:36.910000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:46:36.948000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:36.948000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4006239b20 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:46:36.948000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:46:36.949000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:36.949000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4003508840 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:46:36.949000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:46:36.949000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:36.949000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4006239c80 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:46:36.949000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:46:37.374908 kubelet[2409]: E0209 09:46:37.374866 2409 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-17-0\" not found" node="ip-172-31-17-0" Feb 9 09:46:37.376084 kubelet[2409]: I0209 09:46:37.376047 2409 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-17-0" Feb 9 09:46:37.513628 kubelet[2409]: I0209 09:46:37.513583 2409 apiserver.go:52] "Watching apiserver" Feb 9 09:46:37.534583 kubelet[2409]: I0209 09:46:37.534538 2409 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Feb 9 09:46:39.039948 amazon-ssm-agent[1726]: 2024-02-09 09:46:39 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Feb 9 09:46:39.428749 amazon-ssm-agent[1726]: 2024-02-09 09:46:39 INFO [HealthCheck] HealthCheck reporting agent health. Feb 9 09:46:39.920573 systemd[1]: Reloading. Feb 9 09:46:40.095321 /usr/lib/systemd/system-generators/torcx-generator[2708]: time="2024-02-09T09:46:40Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 09:46:40.095409 /usr/lib/systemd/system-generators/torcx-generator[2708]: time="2024-02-09T09:46:40Z" level=info msg="torcx already run" Feb 9 09:46:40.266142 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 09:46:40.266182 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 09:46:40.305797 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 09:46:40.457503 update_engine[1717]: I0209 09:46:40.456761 1717 update_attempter.cc:509] Updating boot flags... Feb 9 09:46:40.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.518000 audit: BPF prog-id=94 op=LOAD Feb 9 09:46:40.518000 audit: BPF prog-id=73 op=UNLOAD Feb 9 09:46:40.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.519000 audit: BPF prog-id=95 op=LOAD Feb 9 09:46:40.519000 audit: BPF prog-id=55 op=UNLOAD Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit: BPF prog-id=96 op=LOAD Feb 9 09:46:40.522000 audit: BPF prog-id=56 op=UNLOAD Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit: BPF prog-id=97 op=LOAD Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.523000 audit: BPF prog-id=98 op=LOAD Feb 9 09:46:40.523000 audit: BPF prog-id=57 op=UNLOAD Feb 9 09:46:40.523000 audit: BPF prog-id=58 op=UNLOAD Feb 9 09:46:40.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.526000 audit: BPF prog-id=99 op=LOAD Feb 9 09:46:40.526000 audit: BPF prog-id=78 op=UNLOAD Feb 9 09:46:40.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.527000 audit: BPF prog-id=100 op=LOAD Feb 9 09:46:40.528000 audit: BPF prog-id=86 op=UNLOAD Feb 9 09:46:40.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.530000 audit: BPF prog-id=101 op=LOAD Feb 9 09:46:40.530000 audit: BPF prog-id=59 op=UNLOAD Feb 9 09:46:40.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.532000 audit: BPF prog-id=102 op=LOAD Feb 9 09:46:40.533000 audit: BPF prog-id=60 op=UNLOAD Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit: BPF prog-id=103 op=LOAD Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.533000 audit: BPF prog-id=104 op=LOAD Feb 9 09:46:40.533000 audit: BPF prog-id=61 op=UNLOAD Feb 9 09:46:40.533000 audit: BPF prog-id=62 op=UNLOAD Feb 9 09:46:40.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.536000 audit: BPF prog-id=105 op=LOAD Feb 9 09:46:40.536000 audit: BPF prog-id=63 op=UNLOAD Feb 9 09:46:40.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.538000 audit: BPF prog-id=106 op=LOAD Feb 9 09:46:40.538000 audit: BPF prog-id=90 op=UNLOAD Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit: BPF prog-id=107 op=LOAD Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.544000 audit: BPF prog-id=108 op=LOAD Feb 9 09:46:40.544000 audit: BPF prog-id=64 op=UNLOAD Feb 9 09:46:40.544000 audit: BPF prog-id=65 op=UNLOAD Feb 9 09:46:40.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.546000 audit: BPF prog-id=109 op=LOAD Feb 9 09:46:40.546000 audit: BPF prog-id=82 op=UNLOAD Feb 9 09:46:40.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit: BPF prog-id=110 op=LOAD Feb 9 09:46:40.549000 audit: BPF prog-id=66 op=UNLOAD Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit: BPF prog-id=111 op=LOAD Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.549000 audit: BPF prog-id=112 op=LOAD Feb 9 09:46:40.550000 audit: BPF prog-id=67 op=UNLOAD Feb 9 09:46:40.550000 audit: BPF prog-id=68 op=UNLOAD Feb 9 09:46:40.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.551000 audit: BPF prog-id=113 op=LOAD Feb 9 09:46:40.551000 audit: BPF prog-id=70 op=UNLOAD Feb 9 09:46:40.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:40.553000 audit: BPF prog-id=114 op=LOAD Feb 9 09:46:40.553000 audit: BPF prog-id=69 op=UNLOAD Feb 9 09:46:40.604395 systemd[1]: Stopping kubelet.service... Feb 9 09:46:40.605525 kubelet[2409]: I0209 09:46:40.605315 2409 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 9 09:46:40.625829 systemd[1]: kubelet.service: Deactivated successfully. Feb 9 09:46:40.626274 systemd[1]: Stopped kubelet.service. Feb 9 09:46:40.638019 kernel: kauditd_printk_skb: 258 callbacks suppressed Feb 9 09:46:40.638103 kernel: audit: type=1131 audit(1707472000.625:959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:40.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:40.626379 systemd[1]: kubelet.service: Consumed 1.724s CPU time. Feb 9 09:46:40.629824 systemd[1]: Started kubelet.service. Feb 9 09:46:40.656756 kernel: audit: type=1130 audit(1707472000.629:960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:40.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:40.951545 kubelet[2782]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 09:46:40.952996 kubelet[2782]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 9 09:46:40.953194 kubelet[2782]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 09:46:40.953528 kubelet[2782]: I0209 09:46:40.953462 2782 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 9 09:46:41.001441 kubelet[2782]: I0209 09:46:41.001389 2782 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Feb 9 09:46:41.001651 kubelet[2782]: I0209 09:46:41.001628 2782 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 9 09:46:41.002162 kubelet[2782]: I0209 09:46:41.002131 2782 server.go:895] "Client rotation is on, will bootstrap in background" Feb 9 09:46:41.006491 kubelet[2782]: I0209 09:46:41.006455 2782 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Feb 9 09:46:41.020247 kubelet[2782]: I0209 09:46:41.020197 2782 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 9 09:46:41.032072 kubelet[2782]: W0209 09:46:41.032041 2782 machine.go:65] Cannot read vendor id correctly, set empty. Feb 9 09:46:41.033758 kubelet[2782]: I0209 09:46:41.033725 2782 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 9 09:46:41.034362 kubelet[2782]: I0209 09:46:41.034339 2782 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 9 09:46:41.034848 kubelet[2782]: I0209 09:46:41.034817 2782 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Feb 9 09:46:41.035134 kubelet[2782]: I0209 09:46:41.035097 2782 topology_manager.go:138] "Creating topology manager with none policy" Feb 9 09:46:41.035257 kubelet[2782]: I0209 09:46:41.035236 2782 container_manager_linux.go:301] "Creating device plugin manager" Feb 9 09:46:41.035404 kubelet[2782]: I0209 09:46:41.035381 2782 state_mem.go:36] "Initialized new in-memory state store" Feb 9 09:46:41.035844 kubelet[2782]: I0209 09:46:41.035806 2782 kubelet.go:393] "Attempting to sync node with API server" Feb 9 09:46:41.036901 kubelet[2782]: I0209 09:46:41.036868 2782 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 9 09:46:41.037147 kubelet[2782]: I0209 09:46:41.037124 2782 kubelet.go:309] "Adding apiserver pod source" Feb 9 09:46:41.086712 kubelet[2782]: I0209 09:46:41.084885 2782 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 9 09:46:41.090289 kubelet[2782]: I0209 09:46:41.090253 2782 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 9 09:46:41.094254 kubelet[2782]: I0209 09:46:41.094214 2782 server.go:1232] "Started kubelet" Feb 9 09:46:41.099000 audit[2782]: AVC avc: denied { mac_admin } for pid=2782 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:41.112733 kernel: audit: type=1400 audit(1707472001.099:961): avc: denied { mac_admin } for pid=2782 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:41.113404 kubelet[2782]: I0209 09:46:41.113370 2782 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 9 09:46:41.099000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 09:46:41.130030 kernel: audit: type=1401 audit(1707472001.099:961): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 09:46:41.130154 kernel: audit: type=1300 audit(1707472001.099:961): arch=c00000b7 syscall=5 success=no exit=-22 a0=40005b6600 a1=40006c45b8 a2=40005b65d0 a3=25 items=0 ppid=1 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:41.099000 audit[2782]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40005b6600 a1=40006c45b8 a2=40005b65d0 a3=25 items=0 ppid=1 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:41.153126 kernel: audit: type=1327 audit(1707472001.099:961): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 09:46:41.099000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 09:46:41.169000 audit[2782]: AVC avc: denied { mac_admin } for pid=2782 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:41.179505 kubelet[2782]: I0209 09:46:41.179461 2782 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 9 09:46:41.179728 kubelet[2782]: I0209 09:46:41.179705 2782 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 9 09:46:41.185837 kernel: audit: type=1400 audit(1707472001.169:962): avc: denied { mac_admin } for pid=2782 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:41.185958 kernel: audit: type=1401 audit(1707472001.169:962): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 09:46:41.169000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 09:46:41.187039 kubelet[2782]: I0209 09:46:41.135606 2782 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 9 09:46:41.198789 kernel: audit: type=1300 audit(1707472001.169:962): arch=c00000b7 syscall=5 success=no exit=-22 a0=400024bc40 a1=40006c4738 a2=40005b6a20 a3=25 items=0 ppid=1 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:41.169000 audit[2782]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400024bc40 a1=40006c4738 a2=40005b6a20 a3=25 items=0 ppid=1 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:41.169000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 09:46:41.209597 kernel: audit: type=1327 audit(1707472001.169:962): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 09:46:41.228581 kubelet[2782]: I0209 09:46:41.228527 2782 server.go:462] "Adding debug handlers to kubelet server" Feb 9 09:46:41.268661 kubelet[2782]: I0209 09:46:41.135695 2782 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 9 09:46:41.278814 kubelet[2782]: E0209 09:46:41.142655 2782 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 9 09:46:41.281357 kubelet[2782]: E0209 09:46:41.281321 2782 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 9 09:46:41.281794 kubelet[2782]: I0209 09:46:41.211279 2782 volume_manager.go:291] "Starting Kubelet Volume Manager" Feb 9 09:46:41.282442 kubelet[2782]: I0209 09:46:41.211309 2782 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Feb 9 09:46:41.282890 kubelet[2782]: I0209 09:46:41.282860 2782 reconciler_new.go:29] "Reconciler: start to sync state" Feb 9 09:46:41.283591 kubelet[2782]: I0209 09:46:41.283555 2782 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Feb 9 09:46:41.340504 kubelet[2782]: E0209 09:46:41.340453 2782 container_manager_linux.go:881] "Unable to get rootfs data from cAdvisor interface" err="unable to find data in memory cache" Feb 9 09:46:41.361935 kubelet[2782]: I0209 09:46:41.361881 2782 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Feb 9 09:46:41.383185 kubelet[2782]: I0209 09:46:41.383027 2782 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-17-0" Feb 9 09:46:41.383973 kubelet[2782]: I0209 09:46:41.383944 2782 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Feb 9 09:46:41.384640 kubelet[2782]: I0209 09:46:41.384608 2782 status_manager.go:217] "Starting to sync pod status with apiserver" Feb 9 09:46:41.386807 kubelet[2782]: I0209 09:46:41.386759 2782 kubelet.go:2303] "Starting kubelet main sync loop" Feb 9 09:46:41.387106 kubelet[2782]: E0209 09:46:41.387083 2782 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 9 09:46:41.509747 kubelet[2782]: E0209 09:46:41.505356 2782 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Feb 9 09:46:41.544715 kubelet[2782]: I0209 09:46:41.540979 2782 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-17-0" Feb 9 09:46:41.544715 kubelet[2782]: I0209 09:46:41.541101 2782 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-17-0" Feb 9 09:46:41.669421 kubelet[2782]: I0209 09:46:41.669364 2782 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 9 09:46:41.669421 kubelet[2782]: I0209 09:46:41.669404 2782 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 9 09:46:41.669620 kubelet[2782]: I0209 09:46:41.669463 2782 state_mem.go:36] "Initialized new in-memory state store" Feb 9 09:46:41.669850 kubelet[2782]: I0209 09:46:41.669816 2782 state_mem.go:88] "Updated default CPUSet" cpuSet="" Feb 9 09:46:41.669928 kubelet[2782]: I0209 09:46:41.669890 2782 state_mem.go:96] "Updated CPUSet assignments" assignments={} Feb 9 09:46:41.669928 kubelet[2782]: I0209 09:46:41.669909 2782 policy_none.go:49] "None policy: Start" Feb 9 09:46:41.676837 kubelet[2782]: I0209 09:46:41.676769 2782 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 9 09:46:41.677022 kubelet[2782]: I0209 09:46:41.676845 2782 state_mem.go:35] "Initializing new in-memory state store" Feb 9 09:46:41.677250 kubelet[2782]: I0209 09:46:41.677208 2782 state_mem.go:75] "Updated machine memory state" Feb 9 09:46:41.695000 audit[2782]: AVC avc: denied { mac_admin } for pid=2782 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:41.695000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 09:46:41.695000 audit[2782]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d309c0 a1=4000cd89d8 a2=4000d30990 a3=25 items=0 ppid=1 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:41.695000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 09:46:41.698561 kubelet[2782]: I0209 09:46:41.695641 2782 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 9 09:46:41.698561 kubelet[2782]: I0209 09:46:41.695894 2782 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 9 09:46:41.698561 kubelet[2782]: I0209 09:46:41.697443 2782 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 9 09:46:41.705721 kubelet[2782]: I0209 09:46:41.705600 2782 topology_manager.go:215] "Topology Admit Handler" podUID="f97c52b9262b56677d886a9a5cde61a6" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-17-0" Feb 9 09:46:41.705865 kubelet[2782]: I0209 09:46:41.705774 2782 topology_manager.go:215] "Topology Admit Handler" podUID="87b812e977d9093c2a1cf86e60dc6bb8" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-17-0" Feb 9 09:46:41.705865 kubelet[2782]: I0209 09:46:41.705854 2782 topology_manager.go:215] "Topology Admit Handler" podUID="0a9dc061c3c5f69e45ac0a10eb97278c" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-17-0" Feb 9 09:46:41.785619 kubelet[2782]: E0209 09:46:41.783982 2782 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-17-0\" already exists" pod="kube-system/kube-scheduler-ip-172-31-17-0" Feb 9 09:46:41.807708 kubelet[2782]: I0209 09:46:41.807166 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f97c52b9262b56677d886a9a5cde61a6-k8s-certs\") pod \"kube-apiserver-ip-172-31-17-0\" (UID: \"f97c52b9262b56677d886a9a5cde61a6\") " pod="kube-system/kube-apiserver-ip-172-31-17-0" Feb 9 09:46:41.807708 kubelet[2782]: I0209 09:46:41.807266 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/87b812e977d9093c2a1cf86e60dc6bb8-ca-certs\") pod \"kube-controller-manager-ip-172-31-17-0\" (UID: \"87b812e977d9093c2a1cf86e60dc6bb8\") " pod="kube-system/kube-controller-manager-ip-172-31-17-0" Feb 9 09:46:41.807708 kubelet[2782]: I0209 09:46:41.807339 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/87b812e977d9093c2a1cf86e60dc6bb8-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-17-0\" (UID: \"87b812e977d9093c2a1cf86e60dc6bb8\") " pod="kube-system/kube-controller-manager-ip-172-31-17-0" Feb 9 09:46:41.807708 kubelet[2782]: I0209 09:46:41.807411 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/87b812e977d9093c2a1cf86e60dc6bb8-k8s-certs\") pod \"kube-controller-manager-ip-172-31-17-0\" (UID: \"87b812e977d9093c2a1cf86e60dc6bb8\") " pod="kube-system/kube-controller-manager-ip-172-31-17-0" Feb 9 09:46:41.807708 kubelet[2782]: I0209 09:46:41.807526 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/87b812e977d9093c2a1cf86e60dc6bb8-kubeconfig\") pod \"kube-controller-manager-ip-172-31-17-0\" (UID: \"87b812e977d9093c2a1cf86e60dc6bb8\") " pod="kube-system/kube-controller-manager-ip-172-31-17-0" Feb 9 09:46:41.808180 kubelet[2782]: I0209 09:46:41.807605 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/87b812e977d9093c2a1cf86e60dc6bb8-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-17-0\" (UID: \"87b812e977d9093c2a1cf86e60dc6bb8\") " pod="kube-system/kube-controller-manager-ip-172-31-17-0" Feb 9 09:46:41.808180 kubelet[2782]: I0209 09:46:41.807654 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f97c52b9262b56677d886a9a5cde61a6-ca-certs\") pod \"kube-apiserver-ip-172-31-17-0\" (UID: \"f97c52b9262b56677d886a9a5cde61a6\") " pod="kube-system/kube-apiserver-ip-172-31-17-0" Feb 9 09:46:41.808180 kubelet[2782]: I0209 09:46:41.807729 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f97c52b9262b56677d886a9a5cde61a6-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-17-0\" (UID: \"f97c52b9262b56677d886a9a5cde61a6\") " pod="kube-system/kube-apiserver-ip-172-31-17-0" Feb 9 09:46:41.808180 kubelet[2782]: I0209 09:46:41.807800 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/0a9dc061c3c5f69e45ac0a10eb97278c-kubeconfig\") pod \"kube-scheduler-ip-172-31-17-0\" (UID: \"0a9dc061c3c5f69e45ac0a10eb97278c\") " pod="kube-system/kube-scheduler-ip-172-31-17-0" Feb 9 09:46:42.085610 kubelet[2782]: I0209 09:46:42.085557 2782 apiserver.go:52] "Watching apiserver" Feb 9 09:46:42.183182 kubelet[2782]: I0209 09:46:42.183101 2782 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Feb 9 09:46:42.426899 kubelet[2782]: I0209 09:46:42.426774 2782 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-17-0" podStartSLOduration=2.426698036 podCreationTimestamp="2024-02-09 09:46:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 09:46:42.425450673 +0000 UTC m=+1.782104022" watchObservedRunningTime="2024-02-09 09:46:42.426698036 +0000 UTC m=+1.783351408" Feb 9 09:46:42.455564 kubelet[2782]: I0209 09:46:42.455487 2782 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-17-0" podStartSLOduration=1.455405393 podCreationTimestamp="2024-02-09 09:46:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 09:46:42.442105271 +0000 UTC m=+1.798758607" watchObservedRunningTime="2024-02-09 09:46:42.455405393 +0000 UTC m=+1.812058741" Feb 9 09:46:42.495537 kubelet[2782]: I0209 09:46:42.495468 2782 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-17-0" podStartSLOduration=1.495388762 podCreationTimestamp="2024-02-09 09:46:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 09:46:42.456850954 +0000 UTC m=+1.813504338" watchObservedRunningTime="2024-02-09 09:46:42.495388762 +0000 UTC m=+1.852042110" Feb 9 09:46:47.844806 sudo[1994]: pam_unix(sudo:session): session closed for user root Feb 9 09:46:47.844000 audit[1994]: USER_END pid=1994 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 09:46:47.847756 kernel: kauditd_printk_skb: 4 callbacks suppressed Feb 9 09:46:47.847839 kernel: audit: type=1106 audit(1707472007.844:964): pid=1994 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 09:46:47.844000 audit[1994]: CRED_DISP pid=1994 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 09:46:47.864995 kernel: audit: type=1104 audit(1707472007.844:965): pid=1994 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 09:46:47.872356 sshd[1991]: pam_unix(sshd:session): session closed for user core Feb 9 09:46:47.874000 audit[1991]: USER_END pid=1991 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:46:47.878187 systemd[1]: session-7.scope: Deactivated successfully. Feb 9 09:46:47.878525 systemd[1]: session-7.scope: Consumed 9.483s CPU time. Feb 9 09:46:47.879876 systemd[1]: sshd@6-172.31.17.0:22-139.178.89.65:40996.service: Deactivated successfully. Feb 9 09:46:47.875000 audit[1991]: CRED_DISP pid=1991 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:46:47.895521 kernel: audit: type=1106 audit(1707472007.874:966): pid=1991 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:46:47.895652 kernel: audit: type=1104 audit(1707472007.875:967): pid=1991 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:46:47.896113 systemd-logind[1716]: Session 7 logged out. Waiting for processes to exit. Feb 9 09:46:47.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.17.0:22-139.178.89.65:40996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:47.905945 kernel: audit: type=1131 audit(1707472007.879:968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.17.0:22-139.178.89.65:40996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:46:47.897832 systemd-logind[1716]: Removed session 7. Feb 9 09:46:50.230000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:50.230000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000aec900 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:46:50.252860 kernel: audit: type=1400 audit(1707472010.230:969): avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:50.253038 kernel: audit: type=1300 audit(1707472010.230:969): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000aec900 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:46:50.253098 kernel: audit: type=1327 audit(1707472010.230:969): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:46:50.230000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:46:50.236000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:50.273596 kernel: audit: type=1400 audit(1707472010.236:970): avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:50.273791 kernel: audit: type=1300 audit(1707472010.236:970): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bbe1a0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:46:50.236000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bbe1a0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:46:50.236000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:46:50.240000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:50.240000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000aecaa0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:46:50.240000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:46:50.245000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:46:50.245000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000aecd20 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:46:50.245000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:46:50.288000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 9 09:46:50.288000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001050780 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:46:50.288000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:46:52.407417 kubelet[2782]: I0209 09:46:52.407381 2782 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Feb 9 09:46:52.409152 env[1730]: time="2024-02-09T09:46:52.409058397Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Feb 9 09:46:52.409808 kubelet[2782]: I0209 09:46:52.409644 2782 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Feb 9 09:46:53.168651 kubelet[2782]: I0209 09:46:53.168596 2782 topology_manager.go:215] "Topology Admit Handler" podUID="c1322c72-45c5-41db-98f4-3ebd173ed02b" podNamespace="kube-system" podName="kube-proxy-bbw8v" Feb 9 09:46:53.179416 systemd[1]: Created slice kubepods-besteffort-podc1322c72_45c5_41db_98f4_3ebd173ed02b.slice. Feb 9 09:46:53.182747 kubelet[2782]: W0209 09:46:53.182662 2782 helpers.go:242] readString: Failed to read "/sys/fs/cgroup/kubepods.slice/kubepods-besteffort.slice/kubepods-besteffort-podc1322c72_45c5_41db_98f4_3ebd173ed02b.slice/cpuset.cpus.effective": read /sys/fs/cgroup/kubepods.slice/kubepods-besteffort.slice/kubepods-besteffort-podc1322c72_45c5_41db_98f4_3ebd173ed02b.slice/cpuset.cpus.effective: no such device Feb 9 09:46:53.274907 kubelet[2782]: I0209 09:46:53.274867 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c1322c72-45c5-41db-98f4-3ebd173ed02b-xtables-lock\") pod \"kube-proxy-bbw8v\" (UID: \"c1322c72-45c5-41db-98f4-3ebd173ed02b\") " pod="kube-system/kube-proxy-bbw8v" Feb 9 09:46:53.275188 kubelet[2782]: I0209 09:46:53.275166 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/c1322c72-45c5-41db-98f4-3ebd173ed02b-kube-proxy\") pod \"kube-proxy-bbw8v\" (UID: \"c1322c72-45c5-41db-98f4-3ebd173ed02b\") " pod="kube-system/kube-proxy-bbw8v" Feb 9 09:46:53.275352 kubelet[2782]: I0209 09:46:53.275331 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c1322c72-45c5-41db-98f4-3ebd173ed02b-lib-modules\") pod \"kube-proxy-bbw8v\" (UID: \"c1322c72-45c5-41db-98f4-3ebd173ed02b\") " pod="kube-system/kube-proxy-bbw8v" Feb 9 09:46:53.275532 kubelet[2782]: I0209 09:46:53.275510 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pttgk\" (UniqueName: \"kubernetes.io/projected/c1322c72-45c5-41db-98f4-3ebd173ed02b-kube-api-access-pttgk\") pod \"kube-proxy-bbw8v\" (UID: \"c1322c72-45c5-41db-98f4-3ebd173ed02b\") " pod="kube-system/kube-proxy-bbw8v" Feb 9 09:46:53.435376 kubelet[2782]: I0209 09:46:53.435242 2782 topology_manager.go:215] "Topology Admit Handler" podUID="9a66fb91-7d42-4d00-a92d-ed9d08352674" podNamespace="tigera-operator" podName="tigera-operator-55585899bf-bzs4z" Feb 9 09:46:53.447045 systemd[1]: Created slice kubepods-besteffort-pod9a66fb91_7d42_4d00_a92d_ed9d08352674.slice. Feb 9 09:46:53.476585 kubelet[2782]: I0209 09:46:53.476545 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9jk9v\" (UniqueName: \"kubernetes.io/projected/9a66fb91-7d42-4d00-a92d-ed9d08352674-kube-api-access-9jk9v\") pod \"tigera-operator-55585899bf-bzs4z\" (UID: \"9a66fb91-7d42-4d00-a92d-ed9d08352674\") " pod="tigera-operator/tigera-operator-55585899bf-bzs4z" Feb 9 09:46:53.476912 kubelet[2782]: I0209 09:46:53.476887 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/9a66fb91-7d42-4d00-a92d-ed9d08352674-var-lib-calico\") pod \"tigera-operator-55585899bf-bzs4z\" (UID: \"9a66fb91-7d42-4d00-a92d-ed9d08352674\") " pod="tigera-operator/tigera-operator-55585899bf-bzs4z" Feb 9 09:46:53.492286 env[1730]: time="2024-02-09T09:46:53.491556748Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-bbw8v,Uid:c1322c72-45c5-41db-98f4-3ebd173ed02b,Namespace:kube-system,Attempt:0,}" Feb 9 09:46:53.520636 env[1730]: time="2024-02-09T09:46:53.520471609Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:46:53.520933 env[1730]: time="2024-02-09T09:46:53.520859918Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:46:53.521088 env[1730]: time="2024-02-09T09:46:53.520901150Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:46:53.521614 env[1730]: time="2024-02-09T09:46:53.521496169Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d3e05338fb8110abf00fd8adbcc6647ed7a8fd1754e57db8dff2dba36176fb9d pid=3108 runtime=io.containerd.runc.v2 Feb 9 09:46:53.563298 systemd[1]: Started cri-containerd-d3e05338fb8110abf00fd8adbcc6647ed7a8fd1754e57db8dff2dba36176fb9d.scope. Feb 9 09:46:53.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.608765 kernel: kauditd_printk_skb: 10 callbacks suppressed Feb 9 09:46:53.608913 kernel: audit: type=1400 audit(1707472013.604:974): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.623068 kernel: audit: type=1400 audit(1707472013.604:975): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.623184 kernel: audit: type=1400 audit(1707472013.604:976): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.637292 kernel: audit: type=1400 audit(1707472013.604:977): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.637528 kernel: audit: type=1400 audit(1707472013.604:978): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.644722 kernel: audit: type=1400 audit(1707472013.604:979): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.652130 kernel: audit: type=1400 audit(1707472013.604:980): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.668256 kernel: audit: type=1400 audit(1707472013.604:981): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.676232 kernel: audit: type=1400 audit(1707472013.604:982): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.683740 kernel: audit: type=1400 audit(1707472013.604:983): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.604000 audit: BPF prog-id=115 op=LOAD Feb 9 09:46:53.618000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.618000 audit[3118]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3108 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433653035333338666238313130616266303066643861646263633636 Feb 9 09:46:53.618000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.618000 audit[3118]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3108 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433653035333338666238313130616266303066643861646263633636 Feb 9 09:46:53.618000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.618000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.618000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.618000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.618000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.618000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.618000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.618000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.618000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.618000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.618000 audit: BPF prog-id=116 op=LOAD Feb 9 09:46:53.618000 audit[3118]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3108 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433653035333338666238313130616266303066643861646263633636 Feb 9 09:46:53.623000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.623000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.623000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.623000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.623000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.623000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.623000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.623000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.623000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.623000 audit: BPF prog-id=117 op=LOAD Feb 9 09:46:53.623000 audit[3118]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3108 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433653035333338666238313130616266303066643861646263633636 Feb 9 09:46:53.629000 audit: BPF prog-id=117 op=UNLOAD Feb 9 09:46:53.629000 audit: BPF prog-id=116 op=UNLOAD Feb 9 09:46:53.629000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.629000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.629000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.629000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.629000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.629000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.629000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.629000 audit[3118]: AVC avc: denied { perfmon } for pid=3118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.629000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.629000 audit[3118]: AVC avc: denied { bpf } for pid=3118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.629000 audit: BPF prog-id=118 op=LOAD Feb 9 09:46:53.629000 audit[3118]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3108 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433653035333338666238313130616266303066643861646263633636 Feb 9 09:46:53.709854 env[1730]: time="2024-02-09T09:46:53.709784891Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-bbw8v,Uid:c1322c72-45c5-41db-98f4-3ebd173ed02b,Namespace:kube-system,Attempt:0,} returns sandbox id \"d3e05338fb8110abf00fd8adbcc6647ed7a8fd1754e57db8dff2dba36176fb9d\"" Feb 9 09:46:53.718636 env[1730]: time="2024-02-09T09:46:53.718558391Z" level=info msg="CreateContainer within sandbox \"d3e05338fb8110abf00fd8adbcc6647ed7a8fd1754e57db8dff2dba36176fb9d\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Feb 9 09:46:53.746039 env[1730]: time="2024-02-09T09:46:53.745962698Z" level=info msg="CreateContainer within sandbox \"d3e05338fb8110abf00fd8adbcc6647ed7a8fd1754e57db8dff2dba36176fb9d\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"51e654ec222b5668ab7685d346594513e4d99a53cf50c0a6ca3859e01cb1ac5a\"" Feb 9 09:46:53.749193 env[1730]: time="2024-02-09T09:46:53.747213018Z" level=info msg="StartContainer for \"51e654ec222b5668ab7685d346594513e4d99a53cf50c0a6ca3859e01cb1ac5a\"" Feb 9 09:46:53.757336 env[1730]: time="2024-02-09T09:46:53.757242984Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-55585899bf-bzs4z,Uid:9a66fb91-7d42-4d00-a92d-ed9d08352674,Namespace:tigera-operator,Attempt:0,}" Feb 9 09:46:53.786953 systemd[1]: Started cri-containerd-51e654ec222b5668ab7685d346594513e4d99a53cf50c0a6ca3859e01cb1ac5a.scope. Feb 9 09:46:53.803234 env[1730]: time="2024-02-09T09:46:53.803110868Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:46:53.803517 env[1730]: time="2024-02-09T09:46:53.803446134Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:46:53.803790 env[1730]: time="2024-02-09T09:46:53.803729198Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:46:53.804585 env[1730]: time="2024-02-09T09:46:53.804501628Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/990742d91bf0c8d823195c48938aaa8aa0dd8c2c9f6aa0aba712149eee4b53db pid=3165 runtime=io.containerd.runc.v2 Feb 9 09:46:53.834079 systemd[1]: Started cri-containerd-990742d91bf0c8d823195c48938aaa8aa0dd8c2c9f6aa0aba712149eee4b53db.scope. Feb 9 09:46:53.847000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.847000 audit[3149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=3108 pid=3149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653635346563323232623536363861623736383564333436353934 Feb 9 09:46:53.848000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.848000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.848000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.848000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.848000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.848000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.848000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.848000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.848000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.848000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.848000 audit: BPF prog-id=119 op=LOAD Feb 9 09:46:53.848000 audit[3149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400019d8e0 a2=78 a3=0 items=0 ppid=3108 pid=3149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653635346563323232623536363861623736383564333436353934 Feb 9 09:46:53.851000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.851000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.851000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.851000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.851000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.851000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.851000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.851000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.851000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.851000 audit: BPF prog-id=120 op=LOAD Feb 9 09:46:53.851000 audit[3149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400019d670 a2=78 a3=0 items=0 ppid=3108 pid=3149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653635346563323232623536363861623736383564333436353934 Feb 9 09:46:53.853000 audit: BPF prog-id=120 op=UNLOAD Feb 9 09:46:53.853000 audit: BPF prog-id=119 op=UNLOAD Feb 9 09:46:53.854000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.854000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.854000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.854000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.854000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.854000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.854000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.854000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.854000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.854000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.854000 audit: BPF prog-id=121 op=LOAD Feb 9 09:46:53.854000 audit[3149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400019db40 a2=78 a3=0 items=0 ppid=3108 pid=3149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653635346563323232623536363861623736383564333436353934 Feb 9 09:46:53.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.871000 audit: BPF prog-id=122 op=LOAD Feb 9 09:46:53.874000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.874000 audit[3184]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3165 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939303734326439316266306338643832333139356334383933386161 Feb 9 09:46:53.876000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.876000 audit[3184]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3165 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939303734326439316266306338643832333139356334383933386161 Feb 9 09:46:53.876000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.876000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.876000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.876000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.876000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.876000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.876000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.876000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.876000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.876000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.876000 audit: BPF prog-id=123 op=LOAD Feb 9 09:46:53.876000 audit[3184]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3165 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939303734326439316266306338643832333139356334383933386161 Feb 9 09:46:53.878000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.878000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.878000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.878000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.878000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.878000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.878000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.878000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.878000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.878000 audit: BPF prog-id=124 op=LOAD Feb 9 09:46:53.878000 audit[3184]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3165 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.878000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939303734326439316266306338643832333139356334383933386161 Feb 9 09:46:53.879000 audit: BPF prog-id=124 op=UNLOAD Feb 9 09:46:53.880000 audit: BPF prog-id=123 op=UNLOAD Feb 9 09:46:53.880000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.880000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.880000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.880000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.880000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.880000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.880000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.880000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.880000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.880000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:53.880000 audit: BPF prog-id=125 op=LOAD Feb 9 09:46:53.880000 audit[3184]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3165 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:53.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939303734326439316266306338643832333139356334383933386161 Feb 9 09:46:53.912851 env[1730]: time="2024-02-09T09:46:53.911915685Z" level=info msg="StartContainer for \"51e654ec222b5668ab7685d346594513e4d99a53cf50c0a6ca3859e01cb1ac5a\" returns successfully" Feb 9 09:46:53.929251 env[1730]: time="2024-02-09T09:46:53.929164867Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-55585899bf-bzs4z,Uid:9a66fb91-7d42-4d00-a92d-ed9d08352674,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"990742d91bf0c8d823195c48938aaa8aa0dd8c2c9f6aa0aba712149eee4b53db\"" Feb 9 09:46:53.932182 env[1730]: time="2024-02-09T09:46:53.932119944Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\"" Feb 9 09:46:54.051000 audit[3243]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.051000 audit[3243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc35d44f0 a2=0 a3=ffffa39866c0 items=0 ppid=3176 pid=3243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.051000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 9 09:46:54.052000 audit[3244]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=3244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.052000 audit[3244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe5d0ee00 a2=0 a3=ffffa123f6c0 items=0 ppid=3176 pid=3244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.052000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 9 09:46:54.056000 audit[3245]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=3245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.056000 audit[3245]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd3c90700 a2=0 a3=ffff931956c0 items=0 ppid=3176 pid=3245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.056000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 9 09:46:54.058000 audit[3246]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=3246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.058000 audit[3246]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc07fe740 a2=0 a3=ffffa61fd6c0 items=0 ppid=3176 pid=3246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.058000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 9 09:46:54.060000 audit[3247]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=3247 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.060000 audit[3247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe41b5710 a2=0 a3=ffffa811b6c0 items=0 ppid=3176 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.060000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 9 09:46:54.071000 audit[3248]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=3248 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.071000 audit[3248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff59de5e0 a2=0 a3=ffffa95666c0 items=0 ppid=3176 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.071000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 9 09:46:54.166000 audit[3249]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3249 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.166000 audit[3249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffed83c5a0 a2=0 a3=ffffba7316c0 items=0 ppid=3176 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.166000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 9 09:46:54.172000 audit[3251]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3251 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.172000 audit[3251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffdebc21e0 a2=0 a3=ffffb545f6c0 items=0 ppid=3176 pid=3251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.172000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Feb 9 09:46:54.179000 audit[3254]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.179000 audit[3254]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc0623030 a2=0 a3=ffffbf3326c0 items=0 ppid=3176 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.179000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Feb 9 09:46:54.184000 audit[3255]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.184000 audit[3255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe67b6bc0 a2=0 a3=ffff9f5556c0 items=0 ppid=3176 pid=3255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.184000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 9 09:46:54.189000 audit[3257]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.189000 audit[3257]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd1035400 a2=0 a3=ffff8ebea6c0 items=0 ppid=3176 pid=3257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.189000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 9 09:46:54.192000 audit[3258]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.192000 audit[3258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff1269b80 a2=0 a3=ffffa05b66c0 items=0 ppid=3176 pid=3258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.192000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 9 09:46:54.197000 audit[3260]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3260 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.197000 audit[3260]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe5ae0eb0 a2=0 a3=ffff9cf386c0 items=0 ppid=3176 pid=3260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.197000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 9 09:46:54.205000 audit[3263]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.205000 audit[3263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd98eae60 a2=0 a3=ffffb04806c0 items=0 ppid=3176 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.205000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Feb 9 09:46:54.207000 audit[3264]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.207000 audit[3264]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd629b310 a2=0 a3=ffff8c5666c0 items=0 ppid=3176 pid=3264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.207000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 9 09:46:54.212000 audit[3266]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.212000 audit[3266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc1b75ee0 a2=0 a3=ffff9568b6c0 items=0 ppid=3176 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.212000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 9 09:46:54.215000 audit[3267]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3267 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.215000 audit[3267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1797680 a2=0 a3=ffffa85be6c0 items=0 ppid=3176 pid=3267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.215000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 9 09:46:54.222000 audit[3269]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.222000 audit[3269]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdf741210 a2=0 a3=ffffa67016c0 items=0 ppid=3176 pid=3269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.222000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 09:46:54.229000 audit[3272]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.229000 audit[3272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff03a38c0 a2=0 a3=ffffaf51a6c0 items=0 ppid=3176 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.229000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 09:46:54.237000 audit[3275]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.237000 audit[3275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffd9c8f40 a2=0 a3=ffff864596c0 items=0 ppid=3176 pid=3275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.237000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 9 09:46:54.240000 audit[3276]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.240000 audit[3276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe04e8a00 a2=0 a3=ffffa4e496c0 items=0 ppid=3176 pid=3276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.240000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 9 09:46:54.245000 audit[3278]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.245000 audit[3278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffff0cf6570 a2=0 a3=ffffb03166c0 items=0 ppid=3176 pid=3278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.245000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 09:46:54.252000 audit[3281]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.252000 audit[3281]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffff603b90 a2=0 a3=ffff950746c0 items=0 ppid=3176 pid=3281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.252000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 09:46:54.255000 audit[3282]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3282 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.255000 audit[3282]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea7cc530 a2=0 a3=ffffb82236c0 items=0 ppid=3176 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.255000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 9 09:46:54.260000 audit[3284]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 09:46:54.260000 audit[3284]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffe0702790 a2=0 a3=ffffa3c5f6c0 items=0 ppid=3176 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.260000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 9 09:46:54.294000 audit[3290]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3290 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:46:54.294000 audit[3290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffef563b50 a2=0 a3=ffffbab746c0 items=0 ppid=3176 pid=3290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.294000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:46:54.309000 audit[3290]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3290 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:46:54.309000 audit[3290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffef563b50 a2=0 a3=ffffbab746c0 items=0 ppid=3176 pid=3290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.309000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:46:54.312000 audit[3296]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.312000 audit[3296]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff556d910 a2=0 a3=ffffa4aa06c0 items=0 ppid=3176 pid=3296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.312000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 9 09:46:54.319000 audit[3298]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.319000 audit[3298]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffea52b650 a2=0 a3=ffffbb6b26c0 items=0 ppid=3176 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.319000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Feb 9 09:46:54.329000 audit[3301]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.329000 audit[3301]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe3dc3a60 a2=0 a3=ffffb869f6c0 items=0 ppid=3176 pid=3301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.329000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Feb 9 09:46:54.331000 audit[3302]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.331000 audit[3302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff37b4d50 a2=0 a3=ffff9eb126c0 items=0 ppid=3176 pid=3302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.331000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 9 09:46:54.336000 audit[3304]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.336000 audit[3304]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff45a71e0 a2=0 a3=ffffaab686c0 items=0 ppid=3176 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.336000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 9 09:46:54.339000 audit[3305]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.339000 audit[3305]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd4083f20 a2=0 a3=ffff9f4866c0 items=0 ppid=3176 pid=3305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.339000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 9 09:46:54.345000 audit[3307]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.345000 audit[3307]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff7de1f60 a2=0 a3=ffff8f6296c0 items=0 ppid=3176 pid=3307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.345000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Feb 9 09:46:54.353000 audit[3310]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.353000 audit[3310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff0699220 a2=0 a3=ffff847e26c0 items=0 ppid=3176 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.353000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 9 09:46:54.355000 audit[3311]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.355000 audit[3311]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff3beded0 a2=0 a3=ffffaf7136c0 items=0 ppid=3176 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.355000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 9 09:46:54.360000 audit[3313]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.360000 audit[3313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcbe86460 a2=0 a3=ffffba82a6c0 items=0 ppid=3176 pid=3313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.360000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 9 09:46:54.363000 audit[3314]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3314 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.363000 audit[3314]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff9cf73b0 a2=0 a3=ffffb282f6c0 items=0 ppid=3176 pid=3314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.363000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 9 09:46:54.369000 audit[3316]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.369000 audit[3316]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe5713f10 a2=0 a3=ffffad3b26c0 items=0 ppid=3176 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.369000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 09:46:54.376000 audit[3319]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3319 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.376000 audit[3319]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc09951e0 a2=0 a3=ffff7feff6c0 items=0 ppid=3176 pid=3319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.376000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 9 09:46:54.384000 audit[3322]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3322 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.384000 audit[3322]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcb1d4e20 a2=0 a3=ffffae9686c0 items=0 ppid=3176 pid=3322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.384000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Feb 9 09:46:54.386000 audit[3323]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3323 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.386000 audit[3323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe0bcfb60 a2=0 a3=ffff8c9486c0 items=0 ppid=3176 pid=3323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.386000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 9 09:46:54.395000 audit[3325]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3325 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.395000 audit[3325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffcef965c0 a2=0 a3=ffff99d236c0 items=0 ppid=3176 pid=3325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.395000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 09:46:54.405000 audit[3328]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3328 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.405000 audit[3328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffc7ca6770 a2=0 a3=ffffa6a7f6c0 items=0 ppid=3176 pid=3328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.405000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 09:46:54.408000 audit[3329]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3329 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.408000 audit[3329]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcd667430 a2=0 a3=ffffabdc76c0 items=0 ppid=3176 pid=3329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.408000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 9 09:46:54.420637 systemd[1]: run-containerd-runc-k8s.io-d3e05338fb8110abf00fd8adbcc6647ed7a8fd1754e57db8dff2dba36176fb9d-runc.XbOpCB.mount: Deactivated successfully. Feb 9 09:46:54.425000 audit[3331]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3331 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.425000 audit[3331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc1a41d60 a2=0 a3=ffff9ce246c0 items=0 ppid=3176 pid=3331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.425000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 9 09:46:54.428000 audit[3332]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3332 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.428000 audit[3332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe64ab660 a2=0 a3=ffff8681d6c0 items=0 ppid=3176 pid=3332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.428000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 9 09:46:54.433000 audit[3334]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3334 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.433000 audit[3334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe559d0d0 a2=0 a3=ffff9f6c66c0 items=0 ppid=3176 pid=3334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 09:46:54.441000 audit[3337]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3337 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 09:46:54.441000 audit[3337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe50336f0 a2=0 a3=ffffad4e06c0 items=0 ppid=3176 pid=3337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.441000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 09:46:54.446000 audit[3339]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 9 09:46:54.446000 audit[3339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=fffff836d4a0 a2=0 a3=ffffb830b6c0 items=0 ppid=3176 pid=3339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.446000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:46:54.447000 audit[3339]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 9 09:46:54.447000 audit[3339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=fffff836d4a0 a2=0 a3=ffffb830b6c0 items=0 ppid=3176 pid=3339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:54.447000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:46:54.595814 kubelet[2782]: I0209 09:46:54.595637 2782 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-bbw8v" podStartSLOduration=1.595581701 podCreationTimestamp="2024-02-09 09:46:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 09:46:54.595298293 +0000 UTC m=+13.951951641" watchObservedRunningTime="2024-02-09 09:46:54.595581701 +0000 UTC m=+13.952235037" Feb 9 09:46:55.484515 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3196471161.mount: Deactivated successfully. Feb 9 09:46:56.580643 env[1730]: time="2024-02-09T09:46:56.580585428Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:56.584524 env[1730]: time="2024-02-09T09:46:56.584477610Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7a10ec867a90652f951a6ba5a12efb94165e0a1c9b72167810d1065e57d768f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:56.587328 env[1730]: time="2024-02-09T09:46:56.587267579Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:56.590210 env[1730]: time="2024-02-09T09:46:56.590150691Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:715ac9a30f8a9579e44258af20de354715429e11836b493918e9e1a696e9b028,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:46:56.591762 env[1730]: time="2024-02-09T09:46:56.591669997Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\" returns image reference \"sha256:c7a10ec867a90652f951a6ba5a12efb94165e0a1c9b72167810d1065e57d768f\"" Feb 9 09:46:56.600123 env[1730]: time="2024-02-09T09:46:56.600062121Z" level=info msg="CreateContainer within sandbox \"990742d91bf0c8d823195c48938aaa8aa0dd8c2c9f6aa0aba712149eee4b53db\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Feb 9 09:46:56.621949 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4050203293.mount: Deactivated successfully. Feb 9 09:46:56.631752 env[1730]: time="2024-02-09T09:46:56.631646928Z" level=info msg="CreateContainer within sandbox \"990742d91bf0c8d823195c48938aaa8aa0dd8c2c9f6aa0aba712149eee4b53db\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"d10f63d269253593faa4222230b54d1136938b4aede7fdd2dd12b08df09190fb\"" Feb 9 09:46:56.634973 env[1730]: time="2024-02-09T09:46:56.632789351Z" level=info msg="StartContainer for \"d10f63d269253593faa4222230b54d1136938b4aede7fdd2dd12b08df09190fb\"" Feb 9 09:46:56.672224 systemd[1]: Started cri-containerd-d10f63d269253593faa4222230b54d1136938b4aede7fdd2dd12b08df09190fb.scope. Feb 9 09:46:56.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.716000 audit: BPF prog-id=126 op=LOAD Feb 9 09:46:56.717000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.717000 audit[3347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3165 pid=3347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:56.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431306636336432363932353335393366616134323232323330623534 Feb 9 09:46:56.718000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.718000 audit[3347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3165 pid=3347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:56.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431306636336432363932353335393366616134323232323330623534 Feb 9 09:46:56.719000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.719000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.719000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.719000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.719000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.719000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.719000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.719000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.719000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.719000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.719000 audit: BPF prog-id=127 op=LOAD Feb 9 09:46:56.719000 audit[3347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3165 pid=3347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:56.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431306636336432363932353335393366616134323232323330623534 Feb 9 09:46:56.721000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.721000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.721000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.721000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.721000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.721000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.721000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.721000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.721000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.721000 audit: BPF prog-id=128 op=LOAD Feb 9 09:46:56.721000 audit[3347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3165 pid=3347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:56.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431306636336432363932353335393366616134323232323330623534 Feb 9 09:46:56.722000 audit: BPF prog-id=128 op=UNLOAD Feb 9 09:46:56.722000 audit: BPF prog-id=127 op=UNLOAD Feb 9 09:46:56.723000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.723000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.723000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.723000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.723000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.723000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.723000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.723000 audit[3347]: AVC avc: denied { perfmon } for pid=3347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.723000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.723000 audit[3347]: AVC avc: denied { bpf } for pid=3347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:46:56.723000 audit: BPF prog-id=129 op=LOAD Feb 9 09:46:56.723000 audit[3347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3165 pid=3347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:46:56.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431306636336432363932353335393366616134323232323330623534 Feb 9 09:46:56.756193 env[1730]: time="2024-02-09T09:46:56.755963888Z" level=info msg="StartContainer for \"d10f63d269253593faa4222230b54d1136938b4aede7fdd2dd12b08df09190fb\" returns successfully" Feb 9 09:46:57.616751 systemd[1]: run-containerd-runc-k8s.io-d10f63d269253593faa4222230b54d1136938b4aede7fdd2dd12b08df09190fb-runc.LwSE5M.mount: Deactivated successfully. Feb 9 09:47:01.134724 kernel: kauditd_printk_skb: 357 callbacks suppressed Feb 9 09:47:01.134920 kernel: audit: type=1325 audit(1707472021.126:1085): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3381 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:01.126000 audit[3381]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3381 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:01.126000 audit[3381]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffe5d77ee0 a2=0 a3=ffff9dcab6c0 items=0 ppid=3176 pid=3381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:01.126000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:01.153443 kernel: audit: type=1300 audit(1707472021.126:1085): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffe5d77ee0 a2=0 a3=ffff9dcab6c0 items=0 ppid=3176 pid=3381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:01.153538 kernel: audit: type=1327 audit(1707472021.126:1085): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:01.135000 audit[3381]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3381 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:01.135000 audit[3381]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffe5d77ee0 a2=0 a3=ffff9dcab6c0 items=0 ppid=3176 pid=3381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:01.171747 kernel: audit: type=1325 audit(1707472021.135:1086): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3381 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:01.171833 kernel: audit: type=1300 audit(1707472021.135:1086): arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffe5d77ee0 a2=0 a3=ffff9dcab6c0 items=0 ppid=3176 pid=3381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:01.135000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:01.177375 kernel: audit: type=1327 audit(1707472021.135:1086): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:01.190000 audit[3383]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:01.190000 audit[3383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffeb09b180 a2=0 a3=ffff871fb6c0 items=0 ppid=3176 pid=3383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:01.209492 kernel: audit: type=1325 audit(1707472021.190:1087): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:01.209644 kernel: audit: type=1300 audit(1707472021.190:1087): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffeb09b180 a2=0 a3=ffff871fb6c0 items=0 ppid=3176 pid=3383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:01.209721 kernel: audit: type=1327 audit(1707472021.190:1087): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:01.190000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:01.191000 audit[3383]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:01.220957 kernel: audit: type=1325 audit(1707472021.191:1088): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:01.191000 audit[3383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffeb09b180 a2=0 a3=ffff871fb6c0 items=0 ppid=3176 pid=3383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:01.191000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:01.284535 kubelet[2782]: I0209 09:47:01.284463 2782 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-55585899bf-bzs4z" podStartSLOduration=5.623301881 podCreationTimestamp="2024-02-09 09:46:53 +0000 UTC" firstStartedPulling="2024-02-09 09:46:53.931051703 +0000 UTC m=+13.287705027" lastFinishedPulling="2024-02-09 09:46:56.592139399 +0000 UTC m=+15.948792723" observedRunningTime="2024-02-09 09:46:57.613842193 +0000 UTC m=+16.970495577" watchObservedRunningTime="2024-02-09 09:47:01.284389577 +0000 UTC m=+20.641042913" Feb 9 09:47:01.285250 kubelet[2782]: I0209 09:47:01.284729 2782 topology_manager.go:215] "Topology Admit Handler" podUID="87dca75a-9c71-43f7-8e55-a5371dba6a89" podNamespace="calico-system" podName="calico-typha-7597867c94-rfqd2" Feb 9 09:47:01.296430 systemd[1]: Created slice kubepods-besteffort-pod87dca75a_9c71_43f7_8e55_a5371dba6a89.slice. Feb 9 09:47:01.349375 kubelet[2782]: I0209 09:47:01.349316 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/87dca75a-9c71-43f7-8e55-a5371dba6a89-tigera-ca-bundle\") pod \"calico-typha-7597867c94-rfqd2\" (UID: \"87dca75a-9c71-43f7-8e55-a5371dba6a89\") " pod="calico-system/calico-typha-7597867c94-rfqd2" Feb 9 09:47:01.349563 kubelet[2782]: I0209 09:47:01.349395 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n2dm7\" (UniqueName: \"kubernetes.io/projected/87dca75a-9c71-43f7-8e55-a5371dba6a89-kube-api-access-n2dm7\") pod \"calico-typha-7597867c94-rfqd2\" (UID: \"87dca75a-9c71-43f7-8e55-a5371dba6a89\") " pod="calico-system/calico-typha-7597867c94-rfqd2" Feb 9 09:47:01.349563 kubelet[2782]: I0209 09:47:01.349447 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/87dca75a-9c71-43f7-8e55-a5371dba6a89-typha-certs\") pod \"calico-typha-7597867c94-rfqd2\" (UID: \"87dca75a-9c71-43f7-8e55-a5371dba6a89\") " pod="calico-system/calico-typha-7597867c94-rfqd2" Feb 9 09:47:01.558333 kubelet[2782]: I0209 09:47:01.558258 2782 topology_manager.go:215] "Topology Admit Handler" podUID="f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" podNamespace="calico-system" podName="calico-node-dpswt" Feb 9 09:47:01.569760 systemd[1]: Created slice kubepods-besteffort-podf9f3b778_e7e5_46c1_8f6c_32ce0dbbf7f4.slice. Feb 9 09:47:01.601791 env[1730]: time="2024-02-09T09:47:01.601652217Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7597867c94-rfqd2,Uid:87dca75a-9c71-43f7-8e55-a5371dba6a89,Namespace:calico-system,Attempt:0,}" Feb 9 09:47:01.649690 env[1730]: time="2024-02-09T09:47:01.649522597Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:47:01.649690 env[1730]: time="2024-02-09T09:47:01.649603326Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:47:01.649690 env[1730]: time="2024-02-09T09:47:01.649630236Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:47:01.650397 env[1730]: time="2024-02-09T09:47:01.650278577Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493 pid=3394 runtime=io.containerd.runc.v2 Feb 9 09:47:01.651651 kubelet[2782]: I0209 09:47:01.651588 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-flexvol-driver-host\") pod \"calico-node-dpswt\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " pod="calico-system/calico-node-dpswt" Feb 9 09:47:01.651838 kubelet[2782]: I0209 09:47:01.651702 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-lib-modules\") pod \"calico-node-dpswt\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " pod="calico-system/calico-node-dpswt" Feb 9 09:47:01.651838 kubelet[2782]: I0209 09:47:01.651752 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-xtables-lock\") pod \"calico-node-dpswt\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " pod="calico-system/calico-node-dpswt" Feb 9 09:47:01.651838 kubelet[2782]: I0209 09:47:01.651798 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-tigera-ca-bundle\") pod \"calico-node-dpswt\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " pod="calico-system/calico-node-dpswt" Feb 9 09:47:01.652053 kubelet[2782]: I0209 09:47:01.651840 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-cni-net-dir\") pod \"calico-node-dpswt\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " pod="calico-system/calico-node-dpswt" Feb 9 09:47:01.652053 kubelet[2782]: I0209 09:47:01.651886 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-node-certs\") pod \"calico-node-dpswt\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " pod="calico-system/calico-node-dpswt" Feb 9 09:47:01.652053 kubelet[2782]: I0209 09:47:01.651957 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-cni-bin-dir\") pod \"calico-node-dpswt\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " pod="calico-system/calico-node-dpswt" Feb 9 09:47:01.652053 kubelet[2782]: I0209 09:47:01.652006 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c4zmk\" (UniqueName: \"kubernetes.io/projected/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-kube-api-access-c4zmk\") pod \"calico-node-dpswt\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " pod="calico-system/calico-node-dpswt" Feb 9 09:47:01.652053 kubelet[2782]: I0209 09:47:01.652054 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-policysync\") pod \"calico-node-dpswt\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " pod="calico-system/calico-node-dpswt" Feb 9 09:47:01.652343 kubelet[2782]: I0209 09:47:01.652101 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-var-lib-calico\") pod \"calico-node-dpswt\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " pod="calico-system/calico-node-dpswt" Feb 9 09:47:01.652343 kubelet[2782]: I0209 09:47:01.652147 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-cni-log-dir\") pod \"calico-node-dpswt\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " pod="calico-system/calico-node-dpswt" Feb 9 09:47:01.652343 kubelet[2782]: I0209 09:47:01.652198 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-var-run-calico\") pod \"calico-node-dpswt\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " pod="calico-system/calico-node-dpswt" Feb 9 09:47:01.701235 systemd[1]: Started cri-containerd-d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493.scope. Feb 9 09:47:01.765838 kubelet[2782]: E0209 09:47:01.765785 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.765838 kubelet[2782]: W0209 09:47:01.765829 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.766042 kubelet[2782]: E0209 09:47:01.765868 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.782280 kubelet[2782]: I0209 09:47:01.782210 2782 topology_manager.go:215] "Topology Admit Handler" podUID="bc0b6437-68a5-497b-8560-3205bb08c4b9" podNamespace="calico-system" podName="csi-node-driver-xk7qk" Feb 9 09:47:01.782664 kubelet[2782]: E0209 09:47:01.782617 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xk7qk" podUID="bc0b6437-68a5-497b-8560-3205bb08c4b9" Feb 9 09:47:01.785607 kubelet[2782]: E0209 09:47:01.785553 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.785607 kubelet[2782]: W0209 09:47:01.785592 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.785865 kubelet[2782]: E0209 09:47:01.785632 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.815817 kubelet[2782]: E0209 09:47:01.815658 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.815817 kubelet[2782]: W0209 09:47:01.815718 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.815817 kubelet[2782]: E0209 09:47:01.815755 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.817982 kubelet[2782]: E0209 09:47:01.817929 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.817982 kubelet[2782]: W0209 09:47:01.817967 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.818177 kubelet[2782]: E0209 09:47:01.818005 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.818414 kubelet[2782]: E0209 09:47:01.818372 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.818414 kubelet[2782]: W0209 09:47:01.818402 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.818566 kubelet[2782]: E0209 09:47:01.818431 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.818814 kubelet[2782]: E0209 09:47:01.818776 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.818814 kubelet[2782]: W0209 09:47:01.818805 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.818991 kubelet[2782]: E0209 09:47:01.818836 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.819216 kubelet[2782]: E0209 09:47:01.819177 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.819216 kubelet[2782]: W0209 09:47:01.819205 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.819349 kubelet[2782]: E0209 09:47:01.819233 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.819551 kubelet[2782]: E0209 09:47:01.819514 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.819551 kubelet[2782]: W0209 09:47:01.819541 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.819720 kubelet[2782]: E0209 09:47:01.819567 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.819923 kubelet[2782]: E0209 09:47:01.819885 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.819923 kubelet[2782]: W0209 09:47:01.819919 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.820102 kubelet[2782]: E0209 09:47:01.819947 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.820267 kubelet[2782]: E0209 09:47:01.820232 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.820267 kubelet[2782]: W0209 09:47:01.820258 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.820402 kubelet[2782]: E0209 09:47:01.820287 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.820622 kubelet[2782]: E0209 09:47:01.820586 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.820622 kubelet[2782]: W0209 09:47:01.820612 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.820820 kubelet[2782]: E0209 09:47:01.820638 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.821877 kubelet[2782]: E0209 09:47:01.821813 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.821877 kubelet[2782]: W0209 09:47:01.821860 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.822110 kubelet[2782]: E0209 09:47:01.821899 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.825772 kubelet[2782]: E0209 09:47:01.825721 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.825772 kubelet[2782]: W0209 09:47:01.825757 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.826030 kubelet[2782]: E0209 09:47:01.825794 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.826601 kubelet[2782]: E0209 09:47:01.826553 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.826601 kubelet[2782]: W0209 09:47:01.826589 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.826830 kubelet[2782]: E0209 09:47:01.826624 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.828041 kubelet[2782]: E0209 09:47:01.827970 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.828041 kubelet[2782]: W0209 09:47:01.828029 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.828285 kubelet[2782]: E0209 09:47:01.828090 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.833882 kubelet[2782]: E0209 09:47:01.833824 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.833882 kubelet[2782]: W0209 09:47:01.833865 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.834124 kubelet[2782]: E0209 09:47:01.833903 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.834454 kubelet[2782]: E0209 09:47:01.834414 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.834454 kubelet[2782]: W0209 09:47:01.834445 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.834621 kubelet[2782]: E0209 09:47:01.834477 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.834971 kubelet[2782]: E0209 09:47:01.834918 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.834971 kubelet[2782]: W0209 09:47:01.834949 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.835131 kubelet[2782]: E0209 09:47:01.834994 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.835551 kubelet[2782]: E0209 09:47:01.835512 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.835551 kubelet[2782]: W0209 09:47:01.835543 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.835759 kubelet[2782]: E0209 09:47:01.835573 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.837861 kubelet[2782]: E0209 09:47:01.837805 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.837861 kubelet[2782]: W0209 09:47:01.837846 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.838062 kubelet[2782]: E0209 09:47:01.837883 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.838404 kubelet[2782]: E0209 09:47:01.838366 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.838404 kubelet[2782]: W0209 09:47:01.838395 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.838579 kubelet[2782]: E0209 09:47:01.838423 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.838948 kubelet[2782]: E0209 09:47:01.838910 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.838948 kubelet[2782]: W0209 09:47:01.838940 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.839127 kubelet[2782]: E0209 09:47:01.838987 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.854526 kubelet[2782]: E0209 09:47:01.854453 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.854733 kubelet[2782]: W0209 09:47:01.854531 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.854733 kubelet[2782]: E0209 09:47:01.854592 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.854911 kubelet[2782]: I0209 09:47:01.854878 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/bc0b6437-68a5-497b-8560-3205bb08c4b9-kubelet-dir\") pod \"csi-node-driver-xk7qk\" (UID: \"bc0b6437-68a5-497b-8560-3205bb08c4b9\") " pod="calico-system/csi-node-driver-xk7qk" Feb 9 09:47:01.856918 kubelet[2782]: E0209 09:47:01.856858 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.856918 kubelet[2782]: W0209 09:47:01.856902 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.857173 kubelet[2782]: E0209 09:47:01.856953 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.857564 kubelet[2782]: E0209 09:47:01.857522 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.857564 kubelet[2782]: W0209 09:47:01.857556 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.857839 kubelet[2782]: E0209 09:47:01.857801 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.858374 kubelet[2782]: E0209 09:47:01.858327 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.858374 kubelet[2782]: W0209 09:47:01.858361 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.858574 kubelet[2782]: E0209 09:47:01.858420 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.858574 kubelet[2782]: I0209 09:47:01.858503 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mk5vh\" (UniqueName: \"kubernetes.io/projected/bc0b6437-68a5-497b-8560-3205bb08c4b9-kube-api-access-mk5vh\") pod \"csi-node-driver-xk7qk\" (UID: \"bc0b6437-68a5-497b-8560-3205bb08c4b9\") " pod="calico-system/csi-node-driver-xk7qk" Feb 9 09:47:01.859488 kubelet[2782]: E0209 09:47:01.859424 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.859488 kubelet[2782]: W0209 09:47:01.859486 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.859702 kubelet[2782]: E0209 09:47:01.859526 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.859796 kubelet[2782]: I0209 09:47:01.859710 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/bc0b6437-68a5-497b-8560-3205bb08c4b9-socket-dir\") pod \"csi-node-driver-xk7qk\" (UID: \"bc0b6437-68a5-497b-8560-3205bb08c4b9\") " pod="calico-system/csi-node-driver-xk7qk" Feb 9 09:47:01.861296 kubelet[2782]: E0209 09:47:01.861215 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.861446 kubelet[2782]: W0209 09:47:01.861300 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.861446 kubelet[2782]: E0209 09:47:01.861373 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.862687 kubelet[2782]: E0209 09:47:01.862591 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.862687 kubelet[2782]: W0209 09:47:01.862654 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.862910 kubelet[2782]: E0209 09:47:01.862828 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.864896 kubelet[2782]: E0209 09:47:01.864838 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.864896 kubelet[2782]: W0209 09:47:01.864881 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.865153 kubelet[2782]: E0209 09:47:01.865118 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.865231 kubelet[2782]: I0209 09:47:01.865185 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/bc0b6437-68a5-497b-8560-3205bb08c4b9-registration-dir\") pod \"csi-node-driver-xk7qk\" (UID: \"bc0b6437-68a5-497b-8560-3205bb08c4b9\") " pod="calico-system/csi-node-driver-xk7qk" Feb 9 09:47:01.865557 kubelet[2782]: E0209 09:47:01.865521 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.865557 kubelet[2782]: W0209 09:47:01.865549 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.865746 kubelet[2782]: E0209 09:47:01.865588 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.867376 kubelet[2782]: E0209 09:47:01.867314 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.867376 kubelet[2782]: W0209 09:47:01.867357 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.867584 kubelet[2782]: E0209 09:47:01.867408 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.867965 kubelet[2782]: E0209 09:47:01.867927 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.867965 kubelet[2782]: W0209 09:47:01.867958 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.868207 kubelet[2782]: E0209 09:47:01.868000 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.868207 kubelet[2782]: I0209 09:47:01.868046 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/bc0b6437-68a5-497b-8560-3205bb08c4b9-varrun\") pod \"csi-node-driver-xk7qk\" (UID: \"bc0b6437-68a5-497b-8560-3205bb08c4b9\") " pod="calico-system/csi-node-driver-xk7qk" Feb 9 09:47:01.868623 kubelet[2782]: E0209 09:47:01.868580 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.868623 kubelet[2782]: W0209 09:47:01.868616 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.869003 kubelet[2782]: E0209 09:47:01.868773 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.869219 kubelet[2782]: E0209 09:47:01.869183 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.869219 kubelet[2782]: W0209 09:47:01.869213 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.869362 kubelet[2782]: E0209 09:47:01.869266 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.869643 kubelet[2782]: E0209 09:47:01.869602 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.869643 kubelet[2782]: W0209 09:47:01.869633 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.869844 kubelet[2782]: E0209 09:47:01.869660 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.871590 kubelet[2782]: E0209 09:47:01.871536 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.871590 kubelet[2782]: W0209 09:47:01.871574 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.871894 kubelet[2782]: E0209 09:47:01.871614 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.879241 env[1730]: time="2024-02-09T09:47:01.878663357Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-dpswt,Uid:f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4,Namespace:calico-system,Attempt:0,}" Feb 9 09:47:01.907301 env[1730]: time="2024-02-09T09:47:01.907179827Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:47:01.907482 env[1730]: time="2024-02-09T09:47:01.907339017Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:47:01.907482 env[1730]: time="2024-02-09T09:47:01.907402931Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:47:01.907922 env[1730]: time="2024-02-09T09:47:01.907817847Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb pid=3467 runtime=io.containerd.runc.v2 Feb 9 09:47:01.952185 systemd[1]: Started cri-containerd-d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb.scope. Feb 9 09:47:01.968970 kubelet[2782]: E0209 09:47:01.968919 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.968970 kubelet[2782]: W0209 09:47:01.968956 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.969203 kubelet[2782]: E0209 09:47:01.968993 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.969489 kubelet[2782]: E0209 09:47:01.969446 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.969489 kubelet[2782]: W0209 09:47:01.969477 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.969633 kubelet[2782]: E0209 09:47:01.969515 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.970013 kubelet[2782]: E0209 09:47:01.969971 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.970013 kubelet[2782]: W0209 09:47:01.970001 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.970160 kubelet[2782]: E0209 09:47:01.970037 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.970495 kubelet[2782]: E0209 09:47:01.970445 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.970495 kubelet[2782]: W0209 09:47:01.970485 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.970643 kubelet[2782]: E0209 09:47:01.970523 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.971008 kubelet[2782]: E0209 09:47:01.970942 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.971008 kubelet[2782]: W0209 09:47:01.970982 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.971194 kubelet[2782]: E0209 09:47:01.971161 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.971519 kubelet[2782]: E0209 09:47:01.971481 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.971519 kubelet[2782]: W0209 09:47:01.971509 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.971719 kubelet[2782]: E0209 09:47:01.971663 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.972932 kubelet[2782]: E0209 09:47:01.972882 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.972932 kubelet[2782]: W0209 09:47:01.972918 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.973168 kubelet[2782]: E0209 09:47:01.973125 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.973475 kubelet[2782]: E0209 09:47:01.973437 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.973475 kubelet[2782]: W0209 09:47:01.973464 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.973655 kubelet[2782]: E0209 09:47:01.973621 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.973932 kubelet[2782]: E0209 09:47:01.973897 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.974030 kubelet[2782]: W0209 09:47:01.973923 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.974130 kubelet[2782]: E0209 09:47:01.974096 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.976984 kubelet[2782]: E0209 09:47:01.976925 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.976984 kubelet[2782]: W0209 09:47:01.976965 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.977234 kubelet[2782]: E0209 09:47:01.977169 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.977526 kubelet[2782]: E0209 09:47:01.977485 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.977526 kubelet[2782]: W0209 09:47:01.977515 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.977727 kubelet[2782]: E0209 09:47:01.977707 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.977984 kubelet[2782]: E0209 09:47:01.977949 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.978066 kubelet[2782]: W0209 09:47:01.977976 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.978177 kubelet[2782]: E0209 09:47:01.978144 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.978457 kubelet[2782]: E0209 09:47:01.978412 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.978457 kubelet[2782]: W0209 09:47:01.978452 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.978843 kubelet[2782]: E0209 09:47:01.978804 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.979102 kubelet[2782]: E0209 09:47:01.979067 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.979102 kubelet[2782]: W0209 09:47:01.979094 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.979296 kubelet[2782]: E0209 09:47:01.979261 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.979527 kubelet[2782]: E0209 09:47:01.979493 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.979527 kubelet[2782]: W0209 09:47:01.979520 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.979722 kubelet[2782]: E0209 09:47:01.979664 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.979920 kubelet[2782]: E0209 09:47:01.979887 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.979920 kubelet[2782]: W0209 09:47:01.979912 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.980106 kubelet[2782]: E0209 09:47:01.980071 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.980356 kubelet[2782]: E0209 09:47:01.980322 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.980356 kubelet[2782]: W0209 09:47:01.980348 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.980511 kubelet[2782]: E0209 09:47:01.980491 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.983006 kubelet[2782]: E0209 09:47:01.982939 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.983006 kubelet[2782]: W0209 09:47:01.982977 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.983408 kubelet[2782]: E0209 09:47:01.983208 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.983525 kubelet[2782]: E0209 09:47:01.983492 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.983525 kubelet[2782]: W0209 09:47:01.983518 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.983713 kubelet[2782]: E0209 09:47:01.983690 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.984373 kubelet[2782]: E0209 09:47:01.984326 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.984373 kubelet[2782]: W0209 09:47:01.984361 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.984605 kubelet[2782]: E0209 09:47:01.984570 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.984909 kubelet[2782]: E0209 09:47:01.984864 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.984909 kubelet[2782]: W0209 09:47:01.984892 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.985083 kubelet[2782]: E0209 09:47:01.985065 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.985333 kubelet[2782]: E0209 09:47:01.985290 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.985333 kubelet[2782]: W0209 09:47:01.985320 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.985558 kubelet[2782]: E0209 09:47:01.985521 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.986172 kubelet[2782]: E0209 09:47:01.986120 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.986172 kubelet[2782]: W0209 09:47:01.986155 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.986393 kubelet[2782]: E0209 09:47:01.986367 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.986624 kubelet[2782]: E0209 09:47:01.986590 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.986624 kubelet[2782]: W0209 09:47:01.986616 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.986885 kubelet[2782]: E0209 09:47:01.986850 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.990302 kubelet[2782]: E0209 09:47:01.989926 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:01.990302 kubelet[2782]: W0209 09:47:01.989961 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:01.990302 kubelet[2782]: E0209 09:47:01.990059 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:01.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.992000 audit: BPF prog-id=130 op=LOAD Feb 9 09:47:01.993000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.993000 audit[3404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3394 pid=3404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:01.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439666564633366343037636665656635663161363064646333666534 Feb 9 09:47:01.993000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.993000 audit[3404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3394 pid=3404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:01.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439666564633366343037636665656635663161363064646333666534 Feb 9 09:47:01.994000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.994000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.994000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.994000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.994000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.994000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.994000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.994000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.994000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.994000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.994000 audit: BPF prog-id=131 op=LOAD Feb 9 09:47:01.994000 audit[3404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3394 pid=3404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:01.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439666564633366343037636665656635663161363064646333666534 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit: BPF prog-id=132 op=LOAD Feb 9 09:47:01.995000 audit[3404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3394 pid=3404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:01.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439666564633366343037636665656635663161363064646333666534 Feb 9 09:47:01.995000 audit: BPF prog-id=132 op=UNLOAD Feb 9 09:47:01.995000 audit: BPF prog-id=131 op=UNLOAD Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:01.995000 audit: BPF prog-id=133 op=LOAD Feb 9 09:47:01.995000 audit[3404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3394 pid=3404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:01.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439666564633366343037636665656635663161363064646333666534 Feb 9 09:47:02.021616 kubelet[2782]: E0209 09:47:02.021565 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:02.021616 kubelet[2782]: W0209 09:47:02.021601 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:02.021958 kubelet[2782]: E0209 09:47:02.021638 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:02.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.093000 audit: BPF prog-id=134 op=LOAD Feb 9 09:47:02.107000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.107000 audit[3478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3467 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:02.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356461393539306639316136613231366232643635393934363438 Feb 9 09:47:02.107000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.107000 audit[3478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3467 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:02.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356461393539306639316136613231366232643635393934363438 Feb 9 09:47:02.109000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.109000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.109000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.109000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.109000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.109000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.109000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.109000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.109000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.109000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.109000 audit: BPF prog-id=135 op=LOAD Feb 9 09:47:02.109000 audit[3478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3467 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:02.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356461393539306639316136613231366232643635393934363438 Feb 9 09:47:02.110000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.110000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.110000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.110000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.110000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.110000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.110000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.110000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.110000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.110000 audit: BPF prog-id=136 op=LOAD Feb 9 09:47:02.110000 audit[3478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3467 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:02.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356461393539306639316136613231366232643635393934363438 Feb 9 09:47:02.113000 audit: BPF prog-id=136 op=UNLOAD Feb 9 09:47:02.113000 audit: BPF prog-id=135 op=UNLOAD Feb 9 09:47:02.113000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.113000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.113000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.113000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.113000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.113000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.113000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.113000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.113000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.113000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:02.113000 audit: BPF prog-id=137 op=LOAD Feb 9 09:47:02.113000 audit[3478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3467 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:02.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356461393539306639316136613231366232643635393934363438 Feb 9 09:47:02.135644 env[1730]: time="2024-02-09T09:47:02.135575018Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7597867c94-rfqd2,Uid:87dca75a-9c71-43f7-8e55-a5371dba6a89,Namespace:calico-system,Attempt:0,} returns sandbox id \"d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493\"" Feb 9 09:47:02.181355 env[1730]: time="2024-02-09T09:47:02.181298280Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\"" Feb 9 09:47:02.204958 env[1730]: time="2024-02-09T09:47:02.204875336Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-dpswt,Uid:f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4,Namespace:calico-system,Attempt:0,} returns sandbox id \"d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb\"" Feb 9 09:47:02.228000 audit[3535]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=3535 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:02.228000 audit[3535]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=fffff1a16a00 a2=0 a3=ffff876de6c0 items=0 ppid=3176 pid=3535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:02.228000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:02.230000 audit[3535]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3535 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:02.230000 audit[3535]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=fffff1a16a00 a2=0 a3=ffff876de6c0 items=0 ppid=3176 pid=3535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:02.230000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:02.467068 systemd[1]: run-containerd-runc-k8s.io-d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493-runc.Gexk19.mount: Deactivated successfully. Feb 9 09:47:03.167000 audit[3538]: NETFILTER_CFG table=filter:95 family=2 entries=16 op=nft_register_rule pid=3538 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:03.167000 audit[3538]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffd7ba0940 a2=0 a3=ffffaa1156c0 items=0 ppid=3176 pid=3538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:03.167000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:03.171000 audit[3538]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3538 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:03.171000 audit[3538]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffd7ba0940 a2=0 a3=ffffaa1156c0 items=0 ppid=3176 pid=3538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:03.171000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:03.388205 kubelet[2782]: E0209 09:47:03.388148 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xk7qk" podUID="bc0b6437-68a5-497b-8560-3205bb08c4b9" Feb 9 09:47:03.774567 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3746859380.mount: Deactivated successfully. Feb 9 09:47:05.175838 env[1730]: time="2024-02-09T09:47:05.175763862Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:05.180946 env[1730]: time="2024-02-09T09:47:05.180876442Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fba96c9caf161e105c76b559b06b4b2337b89b54833d69984209161d93145969,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:05.185379 env[1730]: time="2024-02-09T09:47:05.185310497Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:05.190065 env[1730]: time="2024-02-09T09:47:05.189986002Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:5f2d3b8c354a4eb6de46e786889913916e620c6c256982fb8d0f1a1d36a282bc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:05.192889 env[1730]: time="2024-02-09T09:47:05.191391359Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\" returns image reference \"sha256:fba96c9caf161e105c76b559b06b4b2337b89b54833d69984209161d93145969\"" Feb 9 09:47:05.209044 env[1730]: time="2024-02-09T09:47:05.208977540Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\"" Feb 9 09:47:05.224502 env[1730]: time="2024-02-09T09:47:05.224420454Z" level=info msg="CreateContainer within sandbox \"d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Feb 9 09:47:05.246784 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1975764794.mount: Deactivated successfully. Feb 9 09:47:05.260960 env[1730]: time="2024-02-09T09:47:05.260889265Z" level=info msg="CreateContainer within sandbox \"d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\"" Feb 9 09:47:05.262204 env[1730]: time="2024-02-09T09:47:05.262150786Z" level=info msg="StartContainer for \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\"" Feb 9 09:47:05.308003 systemd[1]: Started cri-containerd-a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143.scope. Feb 9 09:47:05.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.370000 audit: BPF prog-id=138 op=LOAD Feb 9 09:47:05.371000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.371000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3394 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:05.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136663434303966663465613639373231333363323939363136336532 Feb 9 09:47:05.372000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.372000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3394 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:05.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136663434303966663465613639373231333363323939363136336532 Feb 9 09:47:05.372000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.372000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.372000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.372000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.372000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.372000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.372000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.372000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.372000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.372000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.372000 audit: BPF prog-id=139 op=LOAD Feb 9 09:47:05.372000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3394 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:05.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136663434303966663465613639373231333363323939363136336532 Feb 9 09:47:05.377000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.377000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.377000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.377000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.377000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.377000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.377000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.377000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.377000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.377000 audit: BPF prog-id=140 op=LOAD Feb 9 09:47:05.377000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3394 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:05.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136663434303966663465613639373231333363323939363136336532 Feb 9 09:47:05.379000 audit: BPF prog-id=140 op=UNLOAD Feb 9 09:47:05.379000 audit: BPF prog-id=139 op=UNLOAD Feb 9 09:47:05.379000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.379000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.379000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.379000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.379000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.379000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.379000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.379000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.379000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.379000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:05.379000 audit: BPF prog-id=141 op=LOAD Feb 9 09:47:05.379000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3394 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:05.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136663434303966663465613639373231333363323939363136336532 Feb 9 09:47:05.391616 kubelet[2782]: E0209 09:47:05.391573 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xk7qk" podUID="bc0b6437-68a5-497b-8560-3205bb08c4b9" Feb 9 09:47:05.457141 env[1730]: time="2024-02-09T09:47:05.456969968Z" level=info msg="StartContainer for \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\" returns successfully" Feb 9 09:47:05.635011 env[1730]: time="2024-02-09T09:47:05.634944551Z" level=info msg="StopContainer for \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\" with timeout 300 (s)" Feb 9 09:47:05.635599 env[1730]: time="2024-02-09T09:47:05.635532194Z" level=info msg="Stop container \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\" with signal terminated" Feb 9 09:47:05.741000 audit: BPF prog-id=138 op=UNLOAD Feb 9 09:47:05.742160 systemd[1]: cri-containerd-a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143.scope: Deactivated successfully. Feb 9 09:47:05.747000 audit: BPF prog-id=141 op=UNLOAD Feb 9 09:47:06.201714 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143-rootfs.mount: Deactivated successfully. Feb 9 09:47:06.244337 env[1730]: time="2024-02-09T09:47:06.244259988Z" level=info msg="shim disconnected" id=a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143 Feb 9 09:47:06.244337 env[1730]: time="2024-02-09T09:47:06.244332638Z" level=warning msg="cleaning up after shim disconnected" id=a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143 namespace=k8s.io Feb 9 09:47:06.245079 env[1730]: time="2024-02-09T09:47:06.244355898Z" level=info msg="cleaning up dead shim" Feb 9 09:47:06.264353 env[1730]: time="2024-02-09T09:47:06.264280177Z" level=warning msg="cleanup warnings time=\"2024-02-09T09:47:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3598 runtime=io.containerd.runc.v2\n" Feb 9 09:47:06.272943 env[1730]: time="2024-02-09T09:47:06.272861787Z" level=info msg="StopContainer for \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\" returns successfully" Feb 9 09:47:06.274185 env[1730]: time="2024-02-09T09:47:06.274115705Z" level=info msg="StopPodSandbox for \"d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493\"" Feb 9 09:47:06.274342 env[1730]: time="2024-02-09T09:47:06.274218348Z" level=info msg="Container to stop \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Feb 9 09:47:06.284122 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493-shm.mount: Deactivated successfully. Feb 9 09:47:06.303092 kernel: kauditd_printk_skb: 187 callbacks suppressed Feb 9 09:47:06.303296 kernel: audit: type=1334 audit(1707472026.296:1149): prog-id=130 op=UNLOAD Feb 9 09:47:06.296000 audit: BPF prog-id=130 op=UNLOAD Feb 9 09:47:06.296927 systemd[1]: cri-containerd-d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493.scope: Deactivated successfully. Feb 9 09:47:06.304000 audit: BPF prog-id=133 op=UNLOAD Feb 9 09:47:06.309016 kernel: audit: type=1334 audit(1707472026.304:1150): prog-id=133 op=UNLOAD Feb 9 09:47:06.343175 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493-rootfs.mount: Deactivated successfully. Feb 9 09:47:06.357636 env[1730]: time="2024-02-09T09:47:06.357545672Z" level=info msg="shim disconnected" id=d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493 Feb 9 09:47:06.357636 env[1730]: time="2024-02-09T09:47:06.357616232Z" level=warning msg="cleaning up after shim disconnected" id=d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493 namespace=k8s.io Feb 9 09:47:06.357995 env[1730]: time="2024-02-09T09:47:06.357654315Z" level=info msg="cleaning up dead shim" Feb 9 09:47:06.379314 env[1730]: time="2024-02-09T09:47:06.379249505Z" level=warning msg="cleanup warnings time=\"2024-02-09T09:47:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3631 runtime=io.containerd.runc.v2\n" Feb 9 09:47:06.379911 env[1730]: time="2024-02-09T09:47:06.379845582Z" level=info msg="TearDown network for sandbox \"d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493\" successfully" Feb 9 09:47:06.379911 env[1730]: time="2024-02-09T09:47:06.379898175Z" level=info msg="StopPodSandbox for \"d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493\" returns successfully" Feb 9 09:47:06.421547 kubelet[2782]: I0209 09:47:06.421502 2782 topology_manager.go:215] "Topology Admit Handler" podUID="24af39b4-0417-462c-a73c-8c4bef888841" podNamespace="calico-system" podName="calico-typha-865fcf5697-x8ph2" Feb 9 09:47:06.422448 kubelet[2782]: E0209 09:47:06.422383 2782 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="87dca75a-9c71-43f7-8e55-a5371dba6a89" containerName="calico-typha" Feb 9 09:47:06.422668 kubelet[2782]: I0209 09:47:06.422634 2782 memory_manager.go:346] "RemoveStaleState removing state" podUID="87dca75a-9c71-43f7-8e55-a5371dba6a89" containerName="calico-typha" Feb 9 09:47:06.433752 systemd[1]: Created slice kubepods-besteffort-pod24af39b4_0417_462c_a73c_8c4bef888841.slice. Feb 9 09:47:06.478000 audit[3646]: NETFILTER_CFG table=filter:97 family=2 entries=16 op=nft_register_rule pid=3646 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:06.484917 kubelet[2782]: E0209 09:47:06.484881 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.485140 kubelet[2782]: W0209 09:47:06.485112 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.485295 kubelet[2782]: E0209 09:47:06.485273 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.486064 kubelet[2782]: E0209 09:47:06.486034 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.486264 kubelet[2782]: W0209 09:47:06.486237 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.486437 kubelet[2782]: E0209 09:47:06.486415 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.486725 kernel: audit: type=1325 audit(1707472026.478:1151): table=filter:97 family=2 entries=16 op=nft_register_rule pid=3646 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:06.487210 kubelet[2782]: E0209 09:47:06.487182 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.487387 kubelet[2782]: W0209 09:47:06.487360 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.487550 kubelet[2782]: E0209 09:47:06.487528 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.478000 audit[3646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffd79c7b50 a2=0 a3=ffffb7bed6c0 items=0 ppid=3176 pid=3646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:06.488532 kubelet[2782]: E0209 09:47:06.488504 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.488697 kubelet[2782]: W0209 09:47:06.488655 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.488850 kubelet[2782]: E0209 09:47:06.488829 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.489360 kubelet[2782]: E0209 09:47:06.489338 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.489508 kubelet[2782]: W0209 09:47:06.489484 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.489650 kubelet[2782]: E0209 09:47:06.489630 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.490097 kubelet[2782]: E0209 09:47:06.490077 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.490221 kubelet[2782]: W0209 09:47:06.490198 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.490364 kubelet[2782]: E0209 09:47:06.490344 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.490780 kubelet[2782]: E0209 09:47:06.490760 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.490924 kubelet[2782]: W0209 09:47:06.490889 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.491057 kubelet[2782]: E0209 09:47:06.491036 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.493863 kubelet[2782]: E0209 09:47:06.493827 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.494060 kubelet[2782]: W0209 09:47:06.494033 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.494187 kubelet[2782]: E0209 09:47:06.494165 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.494713 kubelet[2782]: E0209 09:47:06.494690 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.494884 kubelet[2782]: W0209 09:47:06.494859 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.495002 kubelet[2782]: E0209 09:47:06.494981 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.495366 kubelet[2782]: E0209 09:47:06.495346 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.495496 kubelet[2782]: W0209 09:47:06.495472 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.495631 kubelet[2782]: E0209 09:47:06.495610 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.496048 kubelet[2782]: E0209 09:47:06.496028 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.496187 kubelet[2782]: W0209 09:47:06.496163 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.496309 kubelet[2782]: E0209 09:47:06.496289 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.496686 kubelet[2782]: E0209 09:47:06.496653 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.496814 kubelet[2782]: W0209 09:47:06.496791 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.496935 kubelet[2782]: E0209 09:47:06.496915 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.505587 kubelet[2782]: E0209 09:47:06.505531 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.505587 kubelet[2782]: W0209 09:47:06.505574 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.505899 kubelet[2782]: E0209 09:47:06.505612 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.505899 kubelet[2782]: I0209 09:47:06.505768 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/87dca75a-9c71-43f7-8e55-a5371dba6a89-typha-certs\") pod \"87dca75a-9c71-43f7-8e55-a5371dba6a89\" (UID: \"87dca75a-9c71-43f7-8e55-a5371dba6a89\") " Feb 9 09:47:06.478000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:06.511738 kernel: audit: type=1300 audit(1707472026.478:1151): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffd79c7b50 a2=0 a3=ffffb7bed6c0 items=0 ppid=3176 pid=3646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:06.511928 kernel: audit: type=1327 audit(1707472026.478:1151): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:06.512000 kubelet[2782]: E0209 09:47:06.511915 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.512000 kubelet[2782]: W0209 09:47:06.511942 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.512000 kubelet[2782]: E0209 09:47:06.511993 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.512249 kubelet[2782]: I0209 09:47:06.512048 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-n2dm7\" (UniqueName: \"kubernetes.io/projected/87dca75a-9c71-43f7-8e55-a5371dba6a89-kube-api-access-n2dm7\") pod \"87dca75a-9c71-43f7-8e55-a5371dba6a89\" (UID: \"87dca75a-9c71-43f7-8e55-a5371dba6a89\") " Feb 9 09:47:06.512564 kubelet[2782]: E0209 09:47:06.512524 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.512564 kubelet[2782]: W0209 09:47:06.512557 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.512839 kubelet[2782]: E0209 09:47:06.512811 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.513043 kubelet[2782]: I0209 09:47:06.513003 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/87dca75a-9c71-43f7-8e55-a5371dba6a89-tigera-ca-bundle\") pod \"87dca75a-9c71-43f7-8e55-a5371dba6a89\" (UID: \"87dca75a-9c71-43f7-8e55-a5371dba6a89\") " Feb 9 09:47:06.503000 audit[3646]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3646 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:06.518806 kernel: audit: type=1325 audit(1707472026.503:1152): table=nat:98 family=2 entries=12 op=nft_register_rule pid=3646 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:06.518938 kubelet[2782]: E0209 09:47:06.518916 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.519065 kubelet[2782]: W0209 09:47:06.518943 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.519257 kubelet[2782]: E0209 09:47:06.519228 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.503000 audit[3646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffd79c7b50 a2=0 a3=ffffb7bed6c0 items=0 ppid=3176 pid=3646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:06.522254 kubelet[2782]: E0209 09:47:06.522223 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.522416 kubelet[2782]: W0209 09:47:06.522386 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.530945 kubelet[2782]: E0209 09:47:06.530908 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.531616 kubelet[2782]: W0209 09:47:06.531587 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.531809 kubelet[2782]: E0209 09:47:06.531788 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.531996 kubelet[2782]: I0209 09:47:06.531974 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mbdlc\" (UniqueName: \"kubernetes.io/projected/24af39b4-0417-462c-a73c-8c4bef888841-kube-api-access-mbdlc\") pod \"calico-typha-865fcf5697-x8ph2\" (UID: \"24af39b4-0417-462c-a73c-8c4bef888841\") " pod="calico-system/calico-typha-865fcf5697-x8ph2" Feb 9 09:47:06.533789 kernel: audit: type=1300 audit(1707472026.503:1152): arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffd79c7b50 a2=0 a3=ffffb7bed6c0 items=0 ppid=3176 pid=3646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:06.536509 systemd[1]: var-lib-kubelet-pods-87dca75a\x2d9c71\x2d43f7\x2d8e55\x2da5371dba6a89-volume\x2dsubpaths-tigera\x2dca\x2dbundle-calico\x2dtypha-1.mount: Deactivated successfully. Feb 9 09:47:06.538160 kubelet[2782]: E0209 09:47:06.531191 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.542610 kubelet[2782]: E0209 09:47:06.542561 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.544496 kubelet[2782]: W0209 09:47:06.544443 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.544777 kubelet[2782]: E0209 09:47:06.544752 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.544996 kubelet[2782]: I0209 09:47:06.544961 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/24af39b4-0417-462c-a73c-8c4bef888841-tigera-ca-bundle\") pod \"calico-typha-865fcf5697-x8ph2\" (UID: \"24af39b4-0417-462c-a73c-8c4bef888841\") " pod="calico-system/calico-typha-865fcf5697-x8ph2" Feb 9 09:47:06.503000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:06.551744 kubelet[2782]: E0209 09:47:06.551709 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.551975 kubelet[2782]: W0209 09:47:06.551942 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.552092 kernel: audit: type=1327 audit(1707472026.503:1152): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:06.552345 kubelet[2782]: E0209 09:47:06.552320 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.554931 systemd[1]: var-lib-kubelet-pods-87dca75a\x2d9c71\x2d43f7\x2d8e55\x2da5371dba6a89-volumes-kubernetes.io\x7esecret-typha\x2dcerts.mount: Deactivated successfully. Feb 9 09:47:06.556242 kubelet[2782]: I0209 09:47:06.556176 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/87dca75a-9c71-43f7-8e55-a5371dba6a89-typha-certs" (OuterVolumeSpecName: "typha-certs") pod "87dca75a-9c71-43f7-8e55-a5371dba6a89" (UID: "87dca75a-9c71-43f7-8e55-a5371dba6a89"). InnerVolumeSpecName "typha-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Feb 9 09:47:06.556966 kubelet[2782]: E0209 09:47:06.556933 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.557188 kubelet[2782]: W0209 09:47:06.557155 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.558580 kubelet[2782]: E0209 09:47:06.558525 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.559636 kubelet[2782]: E0209 09:47:06.559603 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.560012 kubelet[2782]: W0209 09:47:06.559981 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.560346 kubelet[2782]: E0209 09:47:06.560321 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.560532 kubelet[2782]: I0209 09:47:06.560508 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/24af39b4-0417-462c-a73c-8c4bef888841-typha-certs\") pod \"calico-typha-865fcf5697-x8ph2\" (UID: \"24af39b4-0417-462c-a73c-8c4bef888841\") " pod="calico-system/calico-typha-865fcf5697-x8ph2" Feb 9 09:47:06.560747 kubelet[2782]: I0209 09:47:06.560723 2782 reconciler_common.go:300] "Volume detached for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/87dca75a-9c71-43f7-8e55-a5371dba6a89-typha-certs\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:06.561200 kubelet[2782]: E0209 09:47:06.561175 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.561370 kubelet[2782]: W0209 09:47:06.561342 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.561897 kubelet[2782]: E0209 09:47:06.561871 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.562179 kubelet[2782]: W0209 09:47:06.562148 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.564717 kubelet[2782]: I0209 09:47:06.561354 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/87dca75a-9c71-43f7-8e55-a5371dba6a89-kube-api-access-n2dm7" (OuterVolumeSpecName: "kube-api-access-n2dm7") pod "87dca75a-9c71-43f7-8e55-a5371dba6a89" (UID: "87dca75a-9c71-43f7-8e55-a5371dba6a89"). InnerVolumeSpecName "kube-api-access-n2dm7". PluginName "kubernetes.io/projected", VolumeGidValue "" Feb 9 09:47:06.564717 kubelet[2782]: E0209 09:47:06.561899 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.564717 kubelet[2782]: I0209 09:47:06.563774 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/87dca75a-9c71-43f7-8e55-a5371dba6a89-tigera-ca-bundle" (OuterVolumeSpecName: "tigera-ca-bundle") pod "87dca75a-9c71-43f7-8e55-a5371dba6a89" (UID: "87dca75a-9c71-43f7-8e55-a5371dba6a89"). InnerVolumeSpecName "tigera-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Feb 9 09:47:06.564717 kubelet[2782]: E0209 09:47:06.563847 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.565260 kubelet[2782]: E0209 09:47:06.565231 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.565407 kubelet[2782]: W0209 09:47:06.565378 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.565560 kubelet[2782]: E0209 09:47:06.565535 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.566202 kubelet[2782]: E0209 09:47:06.566171 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.566378 kubelet[2782]: W0209 09:47:06.566350 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.566508 kubelet[2782]: E0209 09:47:06.566485 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.567255 kubelet[2782]: E0209 09:47:06.567227 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.567429 kubelet[2782]: W0209 09:47:06.567403 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.567586 kubelet[2782]: E0209 09:47:06.567564 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.570000 audit[3677]: NETFILTER_CFG table=filter:99 family=2 entries=16 op=nft_register_rule pid=3677 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:06.570000 audit[3677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffc67675f0 a2=0 a3=ffffb33bc6c0 items=0 ppid=3176 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:06.588758 kernel: audit: type=1325 audit(1707472026.570:1153): table=filter:99 family=2 entries=16 op=nft_register_rule pid=3677 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:06.588946 kernel: audit: type=1300 audit(1707472026.570:1153): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffc67675f0 a2=0 a3=ffffb33bc6c0 items=0 ppid=3176 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:06.570000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:06.570000 audit[3677]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=3677 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:06.570000 audit[3677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffc67675f0 a2=0 a3=ffffb33bc6c0 items=0 ppid=3176 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:06.570000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:06.639335 kubelet[2782]: I0209 09:47:06.639296 2782 scope.go:117] "RemoveContainer" containerID="a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143" Feb 9 09:47:06.645733 env[1730]: time="2024-02-09T09:47:06.645251571Z" level=info msg="RemoveContainer for \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\"" Feb 9 09:47:06.651820 env[1730]: time="2024-02-09T09:47:06.651739361Z" level=info msg="RemoveContainer for \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\" returns successfully" Feb 9 09:47:06.654149 systemd[1]: Removed slice kubepods-besteffort-pod87dca75a_9c71_43f7_8e55_a5371dba6a89.slice. Feb 9 09:47:06.655178 kubelet[2782]: I0209 09:47:06.655136 2782 scope.go:117] "RemoveContainer" containerID="a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143" Feb 9 09:47:06.657378 env[1730]: time="2024-02-09T09:47:06.656102161Z" level=error msg="ContainerStatus for \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\": not found" Feb 9 09:47:06.657541 kubelet[2782]: E0209 09:47:06.656453 2782 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\": not found" containerID="a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143" Feb 9 09:47:06.657541 kubelet[2782]: I0209 09:47:06.656533 2782 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143"} err="failed to get container status \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\": rpc error: code = NotFound desc = an error occurred when try to find container \"a6f4409ff4ea6972133c2996163e267ab9c2231dae557f2380dc2917a7c81143\": not found" Feb 9 09:47:06.663749 kubelet[2782]: E0209 09:47:06.663699 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.663749 kubelet[2782]: W0209 09:47:06.663739 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.664043 kubelet[2782]: E0209 09:47:06.663781 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.665889 kubelet[2782]: E0209 09:47:06.665834 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.665889 kubelet[2782]: W0209 09:47:06.665873 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.666155 kubelet[2782]: E0209 09:47:06.665930 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.670967 kubelet[2782]: E0209 09:47:06.670915 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.670967 kubelet[2782]: W0209 09:47:06.670955 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.671227 kubelet[2782]: E0209 09:47:06.671120 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.671227 kubelet[2782]: I0209 09:47:06.671194 2782 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-n2dm7\" (UniqueName: \"kubernetes.io/projected/87dca75a-9c71-43f7-8e55-a5371dba6a89-kube-api-access-n2dm7\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:06.671227 kubelet[2782]: I0209 09:47:06.671221 2782 reconciler_common.go:300] "Volume detached for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/87dca75a-9c71-43f7-8e55-a5371dba6a89-tigera-ca-bundle\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:06.672042 kubelet[2782]: E0209 09:47:06.671797 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.672042 kubelet[2782]: W0209 09:47:06.671829 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.672267 kubelet[2782]: E0209 09:47:06.672193 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.672267 kubelet[2782]: W0209 09:47:06.672212 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.672545 kubelet[2782]: E0209 09:47:06.672510 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.672545 kubelet[2782]: W0209 09:47:06.672537 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.672730 kubelet[2782]: E0209 09:47:06.672567 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.672952 kubelet[2782]: E0209 09:47:06.672916 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.672952 kubelet[2782]: W0209 09:47:06.672944 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.673099 kubelet[2782]: E0209 09:47:06.672970 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.673268 kubelet[2782]: E0209 09:47:06.673233 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.673268 kubelet[2782]: W0209 09:47:06.673260 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.673394 kubelet[2782]: E0209 09:47:06.673285 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.674479 kubelet[2782]: E0209 09:47:06.674396 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.674479 kubelet[2782]: W0209 09:47:06.674436 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.674479 kubelet[2782]: E0209 09:47:06.674473 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.674890 kubelet[2782]: E0209 09:47:06.674806 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.678398 kubelet[2782]: E0209 09:47:06.678334 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.680144 kubelet[2782]: E0209 09:47:06.680094 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.680144 kubelet[2782]: W0209 09:47:06.680132 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.680144 kubelet[2782]: E0209 09:47:06.680171 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.680612 kubelet[2782]: E0209 09:47:06.680547 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.680612 kubelet[2782]: W0209 09:47:06.680575 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.680612 kubelet[2782]: E0209 09:47:06.680603 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.691002 kubelet[2782]: E0209 09:47:06.690498 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.691002 kubelet[2782]: W0209 09:47:06.690536 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.691002 kubelet[2782]: E0209 09:47:06.690768 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.692037 kubelet[2782]: E0209 09:47:06.691995 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.692037 kubelet[2782]: W0209 09:47:06.692029 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.696168 kubelet[2782]: E0209 09:47:06.692065 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.696168 kubelet[2782]: E0209 09:47:06.694067 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.696168 kubelet[2782]: W0209 09:47:06.694096 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.696168 kubelet[2782]: E0209 09:47:06.694131 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.696168 kubelet[2782]: E0209 09:47:06.694560 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.696168 kubelet[2782]: W0209 09:47:06.694577 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.696168 kubelet[2782]: E0209 09:47:06.694604 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.699228 kubelet[2782]: E0209 09:47:06.699188 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.699434 kubelet[2782]: W0209 09:47:06.699404 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.699803 kubelet[2782]: E0209 09:47:06.699526 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.707527 kubelet[2782]: E0209 09:47:06.707475 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.707527 kubelet[2782]: W0209 09:47:06.707517 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.707807 kubelet[2782]: E0209 09:47:06.707558 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.721044 kubelet[2782]: E0209 09:47:06.721011 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:06.721296 kubelet[2782]: W0209 09:47:06.721266 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:06.721480 kubelet[2782]: E0209 09:47:06.721457 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:06.746729 env[1730]: time="2024-02-09T09:47:06.741378235Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-865fcf5697-x8ph2,Uid:24af39b4-0417-462c-a73c-8c4bef888841,Namespace:calico-system,Attempt:0,}" Feb 9 09:47:06.772627 env[1730]: time="2024-02-09T09:47:06.770638126Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:47:06.772627 env[1730]: time="2024-02-09T09:47:06.770750322Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:47:06.772627 env[1730]: time="2024-02-09T09:47:06.770777519Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:47:06.772627 env[1730]: time="2024-02-09T09:47:06.771580178Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d5e5af0230dd62b22b1a072047c396f4e1233ece972e6c7451597875a1d08785 pid=3709 runtime=io.containerd.runc.v2 Feb 9 09:47:06.810212 systemd[1]: Started cri-containerd-d5e5af0230dd62b22b1a072047c396f4e1233ece972e6c7451597875a1d08785.scope. Feb 9 09:47:06.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.851000 audit: BPF prog-id=142 op=LOAD Feb 9 09:47:06.853000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.853000 audit[3720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3709 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:06.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435653561663032333064643632623232623161303732303437633339 Feb 9 09:47:06.853000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.853000 audit[3720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3709 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:06.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435653561663032333064643632623232623161303732303437633339 Feb 9 09:47:06.854000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.854000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.854000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.854000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.854000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.854000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.854000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.854000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.854000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.854000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.854000 audit: BPF prog-id=143 op=LOAD Feb 9 09:47:06.854000 audit[3720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3709 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:06.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435653561663032333064643632623232623161303732303437633339 Feb 9 09:47:06.856000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.856000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.856000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.856000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.856000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.856000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.856000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.856000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.856000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.856000 audit: BPF prog-id=144 op=LOAD Feb 9 09:47:06.856000 audit[3720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3709 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:06.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435653561663032333064643632623232623161303732303437633339 Feb 9 09:47:06.858000 audit: BPF prog-id=144 op=UNLOAD Feb 9 09:47:06.858000 audit: BPF prog-id=143 op=UNLOAD Feb 9 09:47:06.858000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.858000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.858000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.858000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.858000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.858000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.858000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.858000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.858000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.858000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:06.858000 audit: BPF prog-id=145 op=LOAD Feb 9 09:47:06.858000 audit[3720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3709 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:06.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435653561663032333064643632623232623161303732303437633339 Feb 9 09:47:06.942211 env[1730]: time="2024-02-09T09:47:06.942156258Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-865fcf5697-x8ph2,Uid:24af39b4-0417-462c-a73c-8c4bef888841,Namespace:calico-system,Attempt:0,} returns sandbox id \"d5e5af0230dd62b22b1a072047c396f4e1233ece972e6c7451597875a1d08785\"" Feb 9 09:47:06.962788 env[1730]: time="2024-02-09T09:47:06.962706571Z" level=info msg="CreateContainer within sandbox \"d5e5af0230dd62b22b1a072047c396f4e1233ece972e6c7451597875a1d08785\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Feb 9 09:47:07.002548 env[1730]: time="2024-02-09T09:47:07.002392154Z" level=info msg="CreateContainer within sandbox \"d5e5af0230dd62b22b1a072047c396f4e1233ece972e6c7451597875a1d08785\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"c304f20fe5454d3f17e4662425724ae1ece3134307f4796f80a425ba2bd28cbe\"" Feb 9 09:47:07.008350 env[1730]: time="2024-02-09T09:47:07.008285100Z" level=info msg="StartContainer for \"c304f20fe5454d3f17e4662425724ae1ece3134307f4796f80a425ba2bd28cbe\"" Feb 9 09:47:07.065280 systemd[1]: Started cri-containerd-c304f20fe5454d3f17e4662425724ae1ece3134307f4796f80a425ba2bd28cbe.scope. Feb 9 09:47:07.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.145000 audit: BPF prog-id=146 op=LOAD Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3709 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:07.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333303466323066653534353464336631376534363632343235373234 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3709 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:07.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333303466323066653534353464336631376534363632343235373234 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit: BPF prog-id=147 op=LOAD Feb 9 09:47:07.146000 audit[3752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3709 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:07.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333303466323066653534353464336631376534363632343235373234 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit: BPF prog-id=148 op=LOAD Feb 9 09:47:07.146000 audit[3752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3709 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:07.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333303466323066653534353464336631376534363632343235373234 Feb 9 09:47:07.146000 audit: BPF prog-id=148 op=UNLOAD Feb 9 09:47:07.146000 audit: BPF prog-id=147 op=UNLOAD Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.146000 audit: BPF prog-id=149 op=LOAD Feb 9 09:47:07.146000 audit[3752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3709 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:07.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333303466323066653534353464336631376534363632343235373234 Feb 9 09:47:07.222369 systemd[1]: var-lib-kubelet-pods-87dca75a\x2d9c71\x2d43f7\x2d8e55\x2da5371dba6a89-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dn2dm7.mount: Deactivated successfully. Feb 9 09:47:07.364846 env[1730]: time="2024-02-09T09:47:07.364776518Z" level=info msg="StartContainer for \"c304f20fe5454d3f17e4662425724ae1ece3134307f4796f80a425ba2bd28cbe\" returns successfully" Feb 9 09:47:07.370960 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount692641181.mount: Deactivated successfully. Feb 9 09:47:07.388485 kubelet[2782]: E0209 09:47:07.387858 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xk7qk" podUID="bc0b6437-68a5-497b-8560-3205bb08c4b9" Feb 9 09:47:07.395572 kubelet[2782]: I0209 09:47:07.395516 2782 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="87dca75a-9c71-43f7-8e55-a5371dba6a89" path="/var/lib/kubelet/pods/87dca75a-9c71-43f7-8e55-a5371dba6a89/volumes" Feb 9 09:47:07.546470 env[1730]: time="2024-02-09T09:47:07.546406316Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:07.551230 env[1730]: time="2024-02-09T09:47:07.551172008Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbddd33ed55a4a5c129e8f09945d426860425b9778d9402efe7bcefea7990a57,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:07.555620 env[1730]: time="2024-02-09T09:47:07.555547942Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:07.559858 env[1730]: time="2024-02-09T09:47:07.559788672Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:b05edbd1f80db4ada229e6001a666a7dd36bb6ab617143684fb3d28abfc4b71e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:07.562436 env[1730]: time="2024-02-09T09:47:07.561402600Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\" returns image reference \"sha256:cbddd33ed55a4a5c129e8f09945d426860425b9778d9402efe7bcefea7990a57\"" Feb 9 09:47:07.565876 env[1730]: time="2024-02-09T09:47:07.565815633Z" level=info msg="CreateContainer within sandbox \"d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Feb 9 09:47:07.595076 env[1730]: time="2024-02-09T09:47:07.595008307Z" level=info msg="CreateContainer within sandbox \"d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"f07a67387786e62bc36780ab1ec39075be00c608a1cdf69cf0108858864c1484\"" Feb 9 09:47:07.596288 env[1730]: time="2024-02-09T09:47:07.596240027Z" level=info msg="StartContainer for \"f07a67387786e62bc36780ab1ec39075be00c608a1cdf69cf0108858864c1484\"" Feb 9 09:47:07.642667 systemd[1]: Started cri-containerd-f07a67387786e62bc36780ab1ec39075be00c608a1cdf69cf0108858864c1484.scope. Feb 9 09:47:07.716423 kubelet[2782]: E0209 09:47:07.716363 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.716423 kubelet[2782]: W0209 09:47:07.716399 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.717097 kubelet[2782]: E0209 09:47:07.716439 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.717097 kubelet[2782]: E0209 09:47:07.716804 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.717097 kubelet[2782]: W0209 09:47:07.716823 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.717097 kubelet[2782]: E0209 09:47:07.716855 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.717650 kubelet[2782]: E0209 09:47:07.717610 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.717650 kubelet[2782]: W0209 09:47:07.717639 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.717856 kubelet[2782]: E0209 09:47:07.717668 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.718039 kubelet[2782]: E0209 09:47:07.718007 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.718039 kubelet[2782]: W0209 09:47:07.718034 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.718168 kubelet[2782]: E0209 09:47:07.718075 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.718537 kubelet[2782]: E0209 09:47:07.718495 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.718537 kubelet[2782]: W0209 09:47:07.718522 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.718729 kubelet[2782]: E0209 09:47:07.718551 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.718916 kubelet[2782]: E0209 09:47:07.718880 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.718916 kubelet[2782]: W0209 09:47:07.718906 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.719064 kubelet[2782]: E0209 09:47:07.718933 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.719428 kubelet[2782]: E0209 09:47:07.719392 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.719428 kubelet[2782]: W0209 09:47:07.719419 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.719586 kubelet[2782]: E0209 09:47:07.719447 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.719823 kubelet[2782]: E0209 09:47:07.719790 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.719823 kubelet[2782]: W0209 09:47:07.719815 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.720007 kubelet[2782]: E0209 09:47:07.719844 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.720409 kubelet[2782]: E0209 09:47:07.720347 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.720409 kubelet[2782]: W0209 09:47:07.720374 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.720409 kubelet[2782]: E0209 09:47:07.720403 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.720770 kubelet[2782]: E0209 09:47:07.720738 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.720770 kubelet[2782]: W0209 09:47:07.720763 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.720957 kubelet[2782]: E0209 09:47:07.720790 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.721313 kubelet[2782]: E0209 09:47:07.721268 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.721313 kubelet[2782]: W0209 09:47:07.721296 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.721465 kubelet[2782]: E0209 09:47:07.721324 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.721654 kubelet[2782]: E0209 09:47:07.721623 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.721654 kubelet[2782]: W0209 09:47:07.721649 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.721829 kubelet[2782]: E0209 09:47:07.721735 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.722199 kubelet[2782]: E0209 09:47:07.722153 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.722199 kubelet[2782]: W0209 09:47:07.722189 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.722362 kubelet[2782]: E0209 09:47:07.722217 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.722641 kubelet[2782]: E0209 09:47:07.722605 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.722641 kubelet[2782]: W0209 09:47:07.722633 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.722813 kubelet[2782]: E0209 09:47:07.722667 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.723200 kubelet[2782]: E0209 09:47:07.723167 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.723279 kubelet[2782]: W0209 09:47:07.723194 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.723279 kubelet[2782]: E0209 09:47:07.723250 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.744000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.744000 audit[3791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3467 pid=3791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:07.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630376136373338373738366536326263333637383061623165633339 Feb 9 09:47:07.744000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.744000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.744000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.744000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.744000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.744000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.744000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.744000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.744000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.744000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.744000 audit: BPF prog-id=150 op=LOAD Feb 9 09:47:07.744000 audit[3791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3467 pid=3791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:07.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630376136373338373738366536326263333637383061623165633339 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit: BPF prog-id=151 op=LOAD Feb 9 09:47:07.745000 audit[3791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3467 pid=3791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:07.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630376136373338373738366536326263333637383061623165633339 Feb 9 09:47:07.745000 audit: BPF prog-id=151 op=UNLOAD Feb 9 09:47:07.745000 audit: BPF prog-id=150 op=UNLOAD Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { perfmon } for pid=3791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit[3791]: AVC avc: denied { bpf } for pid=3791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:07.745000 audit: BPF prog-id=152 op=LOAD Feb 9 09:47:07.745000 audit[3791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3467 pid=3791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:07.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630376136373338373738366536326263333637383061623165633339 Feb 9 09:47:07.779959 kubelet[2782]: E0209 09:47:07.779897 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.779959 kubelet[2782]: W0209 09:47:07.779936 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.780231 kubelet[2782]: E0209 09:47:07.779971 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.780912 kubelet[2782]: E0209 09:47:07.780870 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.780912 kubelet[2782]: W0209 09:47:07.780904 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.781153 kubelet[2782]: E0209 09:47:07.780953 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.781425 kubelet[2782]: E0209 09:47:07.781387 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.781425 kubelet[2782]: W0209 09:47:07.781416 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.781588 kubelet[2782]: E0209 09:47:07.781456 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.782260 kubelet[2782]: E0209 09:47:07.782221 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.782260 kubelet[2782]: W0209 09:47:07.782253 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.782490 kubelet[2782]: E0209 09:47:07.782433 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.782718 kubelet[2782]: E0209 09:47:07.782665 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.782718 kubelet[2782]: W0209 09:47:07.782714 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.782896 kubelet[2782]: E0209 09:47:07.782866 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.784128 kubelet[2782]: E0209 09:47:07.784050 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.784128 kubelet[2782]: W0209 09:47:07.784112 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.784446 kubelet[2782]: E0209 09:47:07.784324 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.785392 kubelet[2782]: E0209 09:47:07.785348 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.785392 kubelet[2782]: W0209 09:47:07.785382 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.785607 kubelet[2782]: E0209 09:47:07.785582 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.787516 kubelet[2782]: E0209 09:47:07.787472 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.787516 kubelet[2782]: W0209 09:47:07.787507 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.787816 kubelet[2782]: E0209 09:47:07.787753 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.788823 kubelet[2782]: E0209 09:47:07.788780 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.788823 kubelet[2782]: W0209 09:47:07.788814 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.789181 kubelet[2782]: E0209 09:47:07.789135 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.789328 kubelet[2782]: E0209 09:47:07.789260 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.789328 kubelet[2782]: W0209 09:47:07.789277 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.789480 kubelet[2782]: E0209 09:47:07.789424 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.791099 kubelet[2782]: E0209 09:47:07.791051 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.791099 kubelet[2782]: W0209 09:47:07.791088 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.791376 kubelet[2782]: E0209 09:47:07.791147 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.792018 env[1730]: time="2024-02-09T09:47:07.791943901Z" level=info msg="StartContainer for \"f07a67387786e62bc36780ab1ec39075be00c608a1cdf69cf0108858864c1484\" returns successfully" Feb 9 09:47:07.792985 kubelet[2782]: E0209 09:47:07.792931 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.792985 kubelet[2782]: W0209 09:47:07.792964 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.793862 kubelet[2782]: E0209 09:47:07.793258 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.797657 kubelet[2782]: E0209 09:47:07.797606 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.797657 kubelet[2782]: W0209 09:47:07.797650 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.797921 kubelet[2782]: E0209 09:47:07.797885 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.798329 kubelet[2782]: E0209 09:47:07.798284 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.798329 kubelet[2782]: W0209 09:47:07.798321 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.798667 kubelet[2782]: E0209 09:47:07.798496 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.798972 kubelet[2782]: E0209 09:47:07.798925 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.798972 kubelet[2782]: W0209 09:47:07.798954 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.799348 kubelet[2782]: E0209 09:47:07.799161 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.803990 kubelet[2782]: E0209 09:47:07.803938 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.803990 kubelet[2782]: W0209 09:47:07.803977 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.804235 kubelet[2782]: E0209 09:47:07.804193 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.805098 kubelet[2782]: E0209 09:47:07.805049 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.805098 kubelet[2782]: W0209 09:47:07.805085 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.805328 kubelet[2782]: E0209 09:47:07.805132 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.806271 kubelet[2782]: E0209 09:47:07.806223 2782 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 09:47:07.806271 kubelet[2782]: W0209 09:47:07.806258 2782 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 09:47:07.806504 kubelet[2782]: E0209 09:47:07.806300 2782 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 09:47:07.855238 systemd[1]: cri-containerd-f07a67387786e62bc36780ab1ec39075be00c608a1cdf69cf0108858864c1484.scope: Deactivated successfully. Feb 9 09:47:07.859000 audit: BPF prog-id=152 op=UNLOAD Feb 9 09:47:07.994421 env[1730]: time="2024-02-09T09:47:07.994223498Z" level=info msg="shim disconnected" id=f07a67387786e62bc36780ab1ec39075be00c608a1cdf69cf0108858864c1484 Feb 9 09:47:07.994763 env[1730]: time="2024-02-09T09:47:07.994725956Z" level=warning msg="cleaning up after shim disconnected" id=f07a67387786e62bc36780ab1ec39075be00c608a1cdf69cf0108858864c1484 namespace=k8s.io Feb 9 09:47:07.994941 env[1730]: time="2024-02-09T09:47:07.994912841Z" level=info msg="cleaning up dead shim" Feb 9 09:47:08.009874 env[1730]: time="2024-02-09T09:47:08.009818325Z" level=warning msg="cleanup warnings time=\"2024-02-09T09:47:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3864 runtime=io.containerd.runc.v2\n" Feb 9 09:47:08.055969 kubelet[2782]: I0209 09:47:08.055911 2782 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-865fcf5697-x8ph2" podStartSLOduration=5.055839426 podCreationTimestamp="2024-02-09 09:47:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 09:47:07.699518752 +0000 UTC m=+27.056172136" watchObservedRunningTime="2024-02-09 09:47:08.055839426 +0000 UTC m=+27.412492762" Feb 9 09:47:08.088000 audit[3878]: NETFILTER_CFG table=filter:101 family=2 entries=15 op=nft_register_rule pid=3878 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:08.088000 audit[3878]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffdc8bc450 a2=0 a3=ffff85b916c0 items=0 ppid=3176 pid=3878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:08.088000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:08.097000 audit[3878]: NETFILTER_CFG table=nat:102 family=2 entries=19 op=nft_register_chain pid=3878 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:08.097000 audit[3878]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6068 a0=3 a1=ffffdc8bc450 a2=0 a3=ffff85b916c0 items=0 ppid=3176 pid=3878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:08.097000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:08.201757 systemd[1]: run-containerd-runc-k8s.io-f07a67387786e62bc36780ab1ec39075be00c608a1cdf69cf0108858864c1484-runc.0OFqfy.mount: Deactivated successfully. Feb 9 09:47:08.202205 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f07a67387786e62bc36780ab1ec39075be00c608a1cdf69cf0108858864c1484-rootfs.mount: Deactivated successfully. Feb 9 09:47:08.679033 env[1730]: time="2024-02-09T09:47:08.678983233Z" level=info msg="StopPodSandbox for \"d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb\"" Feb 9 09:47:08.679868 env[1730]: time="2024-02-09T09:47:08.679725286Z" level=info msg="Container to stop \"f07a67387786e62bc36780ab1ec39075be00c608a1cdf69cf0108858864c1484\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Feb 9 09:47:08.683316 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb-shm.mount: Deactivated successfully. Feb 9 09:47:08.709197 systemd[1]: cri-containerd-d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb.scope: Deactivated successfully. Feb 9 09:47:08.709000 audit: BPF prog-id=134 op=UNLOAD Feb 9 09:47:08.712000 audit: BPF prog-id=137 op=UNLOAD Feb 9 09:47:08.757714 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb-rootfs.mount: Deactivated successfully. Feb 9 09:47:08.778954 env[1730]: time="2024-02-09T09:47:08.778878055Z" level=info msg="shim disconnected" id=d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb Feb 9 09:47:08.778954 env[1730]: time="2024-02-09T09:47:08.778946155Z" level=warning msg="cleaning up after shim disconnected" id=d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb namespace=k8s.io Feb 9 09:47:08.779301 env[1730]: time="2024-02-09T09:47:08.778968947Z" level=info msg="cleaning up dead shim" Feb 9 09:47:08.803027 env[1730]: time="2024-02-09T09:47:08.802954217Z" level=warning msg="cleanup warnings time=\"2024-02-09T09:47:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3902 runtime=io.containerd.runc.v2\n" Feb 9 09:47:08.803701 env[1730]: time="2024-02-09T09:47:08.803610972Z" level=info msg="TearDown network for sandbox \"d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb\" successfully" Feb 9 09:47:08.803868 env[1730]: time="2024-02-09T09:47:08.803665341Z" level=info msg="StopPodSandbox for \"d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb\" returns successfully" Feb 9 09:47:08.896151 kubelet[2782]: I0209 09:47:08.896101 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-c4zmk\" (UniqueName: \"kubernetes.io/projected/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-kube-api-access-c4zmk\") pod \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " Feb 9 09:47:08.896805 kubelet[2782]: I0209 09:47:08.896190 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-policysync\") pod \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " Feb 9 09:47:08.896805 kubelet[2782]: I0209 09:47:08.896258 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-var-run-calico\") pod \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " Feb 9 09:47:08.896805 kubelet[2782]: I0209 09:47:08.896344 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-tigera-ca-bundle\") pod \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " Feb 9 09:47:08.896805 kubelet[2782]: I0209 09:47:08.896388 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-cni-net-dir\") pod \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " Feb 9 09:47:08.896805 kubelet[2782]: I0209 09:47:08.896458 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-node-certs\") pod \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " Feb 9 09:47:08.896805 kubelet[2782]: I0209 09:47:08.896524 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-cni-bin-dir\") pod \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " Feb 9 09:47:08.897198 kubelet[2782]: I0209 09:47:08.896570 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-flexvol-driver-host\") pod \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " Feb 9 09:47:08.897198 kubelet[2782]: I0209 09:47:08.896635 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-xtables-lock\") pod \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " Feb 9 09:47:08.897198 kubelet[2782]: I0209 09:47:08.896733 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-var-lib-calico\") pod \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " Feb 9 09:47:08.897198 kubelet[2782]: I0209 09:47:08.896804 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-cni-log-dir\") pod \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " Feb 9 09:47:08.897198 kubelet[2782]: I0209 09:47:08.896849 2782 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-lib-modules\") pod \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\" (UID: \"f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4\") " Feb 9 09:47:08.897198 kubelet[2782]: I0209 09:47:08.896994 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" (UID: "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Feb 9 09:47:08.899216 kubelet[2782]: I0209 09:47:08.897996 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-policysync" (OuterVolumeSpecName: "policysync") pod "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" (UID: "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4"). InnerVolumeSpecName "policysync". PluginName "kubernetes.io/host-path", VolumeGidValue "" Feb 9 09:47:08.899216 kubelet[2782]: I0209 09:47:08.898063 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-var-run-calico" (OuterVolumeSpecName: "var-run-calico") pod "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" (UID: "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4"). InnerVolumeSpecName "var-run-calico". PluginName "kubernetes.io/host-path", VolumeGidValue "" Feb 9 09:47:08.899216 kubelet[2782]: I0209 09:47:08.898766 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-tigera-ca-bundle" (OuterVolumeSpecName: "tigera-ca-bundle") pod "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" (UID: "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4"). InnerVolumeSpecName "tigera-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Feb 9 09:47:08.899216 kubelet[2782]: I0209 09:47:08.898826 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-cni-net-dir" (OuterVolumeSpecName: "cni-net-dir") pod "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" (UID: "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4"). InnerVolumeSpecName "cni-net-dir". PluginName "kubernetes.io/host-path", VolumeGidValue "" Feb 9 09:47:08.902470 kubelet[2782]: I0209 09:47:08.902397 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" (UID: "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Feb 9 09:47:08.902645 kubelet[2782]: I0209 09:47:08.902491 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-cni-bin-dir" (OuterVolumeSpecName: "cni-bin-dir") pod "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" (UID: "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4"). InnerVolumeSpecName "cni-bin-dir". PluginName "kubernetes.io/host-path", VolumeGidValue "" Feb 9 09:47:08.902645 kubelet[2782]: I0209 09:47:08.902539 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-flexvol-driver-host" (OuterVolumeSpecName: "flexvol-driver-host") pod "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" (UID: "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4"). InnerVolumeSpecName "flexvol-driver-host". PluginName "kubernetes.io/host-path", VolumeGidValue "" Feb 9 09:47:08.902831 kubelet[2782]: I0209 09:47:08.902652 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-var-lib-calico" (OuterVolumeSpecName: "var-lib-calico") pod "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" (UID: "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4"). InnerVolumeSpecName "var-lib-calico". PluginName "kubernetes.io/host-path", VolumeGidValue "" Feb 9 09:47:08.902831 kubelet[2782]: I0209 09:47:08.902725 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-cni-log-dir" (OuterVolumeSpecName: "cni-log-dir") pod "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" (UID: "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4"). InnerVolumeSpecName "cni-log-dir". PluginName "kubernetes.io/host-path", VolumeGidValue "" Feb 9 09:47:08.907111 systemd[1]: var-lib-kubelet-pods-f9f3b778\x2de7e5\x2d46c1\x2d8f6c\x2d32ce0dbbf7f4-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dc4zmk.mount: Deactivated successfully. Feb 9 09:47:08.911849 kubelet[2782]: I0209 09:47:08.911794 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-kube-api-access-c4zmk" (OuterVolumeSpecName: "kube-api-access-c4zmk") pod "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" (UID: "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4"). InnerVolumeSpecName "kube-api-access-c4zmk". PluginName "kubernetes.io/projected", VolumeGidValue "" Feb 9 09:47:08.921667 systemd[1]: var-lib-kubelet-pods-f9f3b778\x2de7e5\x2d46c1\x2d8f6c\x2d32ce0dbbf7f4-volumes-kubernetes.io\x7esecret-node\x2dcerts.mount: Deactivated successfully. Feb 9 09:47:08.922934 kubelet[2782]: I0209 09:47:08.922889 2782 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-node-certs" (OuterVolumeSpecName: "node-certs") pod "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" (UID: "f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4"). InnerVolumeSpecName "node-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Feb 9 09:47:08.997586 kubelet[2782]: I0209 09:47:08.997453 2782 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-lib-modules\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:08.997889 kubelet[2782]: I0209 09:47:08.997863 2782 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-c4zmk\" (UniqueName: \"kubernetes.io/projected/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-kube-api-access-c4zmk\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:08.998046 kubelet[2782]: I0209 09:47:08.998025 2782 reconciler_common.go:300] "Volume detached for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-policysync\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:08.998180 kubelet[2782]: I0209 09:47:08.998160 2782 reconciler_common.go:300] "Volume detached for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-var-run-calico\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:08.998314 kubelet[2782]: I0209 09:47:08.998291 2782 reconciler_common.go:300] "Volume detached for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-tigera-ca-bundle\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:08.998449 kubelet[2782]: I0209 09:47:08.998428 2782 reconciler_common.go:300] "Volume detached for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-cni-net-dir\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:08.998571 kubelet[2782]: I0209 09:47:08.998550 2782 reconciler_common.go:300] "Volume detached for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-node-certs\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:08.998725 kubelet[2782]: I0209 09:47:08.998704 2782 reconciler_common.go:300] "Volume detached for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-cni-bin-dir\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:08.998881 kubelet[2782]: I0209 09:47:08.998859 2782 reconciler_common.go:300] "Volume detached for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-flexvol-driver-host\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:08.999012 kubelet[2782]: I0209 09:47:08.998991 2782 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-xtables-lock\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:08.999161 kubelet[2782]: I0209 09:47:08.999141 2782 reconciler_common.go:300] "Volume detached for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-var-lib-calico\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:09.002112 kubelet[2782]: I0209 09:47:09.002083 2782 reconciler_common.go:300] "Volume detached for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4-cni-log-dir\") on node \"ip-172-31-17-0\" DevicePath \"\"" Feb 9 09:47:09.387995 kubelet[2782]: E0209 09:47:09.387937 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xk7qk" podUID="bc0b6437-68a5-497b-8560-3205bb08c4b9" Feb 9 09:47:09.401880 systemd[1]: Removed slice kubepods-besteffort-podf9f3b778_e7e5_46c1_8f6c_32ce0dbbf7f4.slice. Feb 9 09:47:09.683661 kubelet[2782]: I0209 09:47:09.683430 2782 scope.go:117] "RemoveContainer" containerID="f07a67387786e62bc36780ab1ec39075be00c608a1cdf69cf0108858864c1484" Feb 9 09:47:09.689481 env[1730]: time="2024-02-09T09:47:09.689414032Z" level=info msg="RemoveContainer for \"f07a67387786e62bc36780ab1ec39075be00c608a1cdf69cf0108858864c1484\"" Feb 9 09:47:09.697421 env[1730]: time="2024-02-09T09:47:09.697344610Z" level=info msg="RemoveContainer for \"f07a67387786e62bc36780ab1ec39075be00c608a1cdf69cf0108858864c1484\" returns successfully" Feb 9 09:47:09.742801 kubelet[2782]: I0209 09:47:09.742754 2782 topology_manager.go:215] "Topology Admit Handler" podUID="87253b6d-aa55-4609-95c9-5a3e7b2317a3" podNamespace="calico-system" podName="calico-node-rt7ww" Feb 9 09:47:09.743130 kubelet[2782]: E0209 09:47:09.743104 2782 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" containerName="flexvol-driver" Feb 9 09:47:09.743335 kubelet[2782]: I0209 09:47:09.743313 2782 memory_manager.go:346] "RemoveStaleState removing state" podUID="f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" containerName="flexvol-driver" Feb 9 09:47:09.753959 systemd[1]: Created slice kubepods-besteffort-pod87253b6d_aa55_4609_95c9_5a3e7b2317a3.slice. Feb 9 09:47:09.807622 kubelet[2782]: I0209 09:47:09.807581 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/87253b6d-aa55-4609-95c9-5a3e7b2317a3-lib-modules\") pod \"calico-node-rt7ww\" (UID: \"87253b6d-aa55-4609-95c9-5a3e7b2317a3\") " pod="calico-system/calico-node-rt7ww" Feb 9 09:47:09.807984 kubelet[2782]: I0209 09:47:09.807960 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/87253b6d-aa55-4609-95c9-5a3e7b2317a3-var-lib-calico\") pod \"calico-node-rt7ww\" (UID: \"87253b6d-aa55-4609-95c9-5a3e7b2317a3\") " pod="calico-system/calico-node-rt7ww" Feb 9 09:47:09.808146 kubelet[2782]: I0209 09:47:09.808125 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/87253b6d-aa55-4609-95c9-5a3e7b2317a3-cni-net-dir\") pod \"calico-node-rt7ww\" (UID: \"87253b6d-aa55-4609-95c9-5a3e7b2317a3\") " pod="calico-system/calico-node-rt7ww" Feb 9 09:47:09.808305 kubelet[2782]: I0209 09:47:09.808284 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/87253b6d-aa55-4609-95c9-5a3e7b2317a3-policysync\") pod \"calico-node-rt7ww\" (UID: \"87253b6d-aa55-4609-95c9-5a3e7b2317a3\") " pod="calico-system/calico-node-rt7ww" Feb 9 09:47:09.808491 kubelet[2782]: I0209 09:47:09.808451 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/87253b6d-aa55-4609-95c9-5a3e7b2317a3-flexvol-driver-host\") pod \"calico-node-rt7ww\" (UID: \"87253b6d-aa55-4609-95c9-5a3e7b2317a3\") " pod="calico-system/calico-node-rt7ww" Feb 9 09:47:09.808640 kubelet[2782]: I0209 09:47:09.808619 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/87253b6d-aa55-4609-95c9-5a3e7b2317a3-xtables-lock\") pod \"calico-node-rt7ww\" (UID: \"87253b6d-aa55-4609-95c9-5a3e7b2317a3\") " pod="calico-system/calico-node-rt7ww" Feb 9 09:47:09.808842 kubelet[2782]: I0209 09:47:09.808821 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/87253b6d-aa55-4609-95c9-5a3e7b2317a3-tigera-ca-bundle\") pod \"calico-node-rt7ww\" (UID: \"87253b6d-aa55-4609-95c9-5a3e7b2317a3\") " pod="calico-system/calico-node-rt7ww" Feb 9 09:47:09.809002 kubelet[2782]: I0209 09:47:09.808981 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/87253b6d-aa55-4609-95c9-5a3e7b2317a3-node-certs\") pod \"calico-node-rt7ww\" (UID: \"87253b6d-aa55-4609-95c9-5a3e7b2317a3\") " pod="calico-system/calico-node-rt7ww" Feb 9 09:47:09.809210 kubelet[2782]: I0209 09:47:09.809188 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/87253b6d-aa55-4609-95c9-5a3e7b2317a3-cni-bin-dir\") pod \"calico-node-rt7ww\" (UID: \"87253b6d-aa55-4609-95c9-5a3e7b2317a3\") " pod="calico-system/calico-node-rt7ww" Feb 9 09:47:09.809483 kubelet[2782]: I0209 09:47:09.809458 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/87253b6d-aa55-4609-95c9-5a3e7b2317a3-cni-log-dir\") pod \"calico-node-rt7ww\" (UID: \"87253b6d-aa55-4609-95c9-5a3e7b2317a3\") " pod="calico-system/calico-node-rt7ww" Feb 9 09:47:09.809668 kubelet[2782]: I0209 09:47:09.809635 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/87253b6d-aa55-4609-95c9-5a3e7b2317a3-var-run-calico\") pod \"calico-node-rt7ww\" (UID: \"87253b6d-aa55-4609-95c9-5a3e7b2317a3\") " pod="calico-system/calico-node-rt7ww" Feb 9 09:47:09.809877 kubelet[2782]: I0209 09:47:09.809855 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d65jx\" (UniqueName: \"kubernetes.io/projected/87253b6d-aa55-4609-95c9-5a3e7b2317a3-kube-api-access-d65jx\") pod \"calico-node-rt7ww\" (UID: \"87253b6d-aa55-4609-95c9-5a3e7b2317a3\") " pod="calico-system/calico-node-rt7ww" Feb 9 09:47:10.059727 env[1730]: time="2024-02-09T09:47:10.059454238Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-rt7ww,Uid:87253b6d-aa55-4609-95c9-5a3e7b2317a3,Namespace:calico-system,Attempt:0,}" Feb 9 09:47:10.091028 env[1730]: time="2024-02-09T09:47:10.090890181Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:47:10.091028 env[1730]: time="2024-02-09T09:47:10.090969490Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:47:10.091345 env[1730]: time="2024-02-09T09:47:10.090997599Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:47:10.091687 env[1730]: time="2024-02-09T09:47:10.091598107Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0ad48ae943aa64d0c10a690176f0e01855ec424d3f2af45be8e629f663290e88 pid=3926 runtime=io.containerd.runc.v2 Feb 9 09:47:10.129557 systemd[1]: Started cri-containerd-0ad48ae943aa64d0c10a690176f0e01855ec424d3f2af45be8e629f663290e88.scope. Feb 9 09:47:10.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.157000 audit: BPF prog-id=153 op=LOAD Feb 9 09:47:10.159000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.159000 audit[3936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=3926 pid=3936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:10.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061643438616539343361613634643063313061363930313736663065 Feb 9 09:47:10.159000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.159000 audit[3936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=3926 pid=3936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:10.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061643438616539343361613634643063313061363930313736663065 Feb 9 09:47:10.160000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.160000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.160000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.160000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.160000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.160000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.160000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.160000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.160000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.160000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.160000 audit: BPF prog-id=154 op=LOAD Feb 9 09:47:10.160000 audit[3936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=3926 pid=3936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:10.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061643438616539343361613634643063313061363930313736663065 Feb 9 09:47:10.162000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.162000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.162000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.162000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.162000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.162000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.162000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.162000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.162000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.162000 audit: BPF prog-id=155 op=LOAD Feb 9 09:47:10.162000 audit[3936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=3926 pid=3936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:10.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061643438616539343361613634643063313061363930313736663065 Feb 9 09:47:10.163000 audit: BPF prog-id=155 op=UNLOAD Feb 9 09:47:10.163000 audit: BPF prog-id=154 op=UNLOAD Feb 9 09:47:10.163000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.163000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.163000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.163000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.163000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.163000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.163000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.163000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.163000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.163000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.163000 audit: BPF prog-id=156 op=LOAD Feb 9 09:47:10.163000 audit[3936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=3926 pid=3936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:10.163000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061643438616539343361613634643063313061363930313736663065 Feb 9 09:47:10.197640 env[1730]: time="2024-02-09T09:47:10.197554678Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-rt7ww,Uid:87253b6d-aa55-4609-95c9-5a3e7b2317a3,Namespace:calico-system,Attempt:0,} returns sandbox id \"0ad48ae943aa64d0c10a690176f0e01855ec424d3f2af45be8e629f663290e88\"" Feb 9 09:47:10.204293 env[1730]: time="2024-02-09T09:47:10.204214107Z" level=info msg="CreateContainer within sandbox \"0ad48ae943aa64d0c10a690176f0e01855ec424d3f2af45be8e629f663290e88\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Feb 9 09:47:10.233319 env[1730]: time="2024-02-09T09:47:10.233249626Z" level=info msg="CreateContainer within sandbox \"0ad48ae943aa64d0c10a690176f0e01855ec424d3f2af45be8e629f663290e88\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"921f0ac6551ec162b853e170006043faaf1a308f96007cad8b2a844da72243cd\"" Feb 9 09:47:10.234658 env[1730]: time="2024-02-09T09:47:10.234599419Z" level=info msg="StartContainer for \"921f0ac6551ec162b853e170006043faaf1a308f96007cad8b2a844da72243cd\"" Feb 9 09:47:10.272330 systemd[1]: Started cri-containerd-921f0ac6551ec162b853e170006043faaf1a308f96007cad8b2a844da72243cd.scope. Feb 9 09:47:10.315000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.315000 audit[3967]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=3926 pid=3967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:10.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932316630616336353531656331363262383533653137303030363034 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit: BPF prog-id=157 op=LOAD Feb 9 09:47:10.316000 audit[3967]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=3926 pid=3967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:10.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932316630616336353531656331363262383533653137303030363034 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.316000 audit: BPF prog-id=158 op=LOAD Feb 9 09:47:10.316000 audit[3967]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=3926 pid=3967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:10.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932316630616336353531656331363262383533653137303030363034 Feb 9 09:47:10.320000 audit: BPF prog-id=158 op=UNLOAD Feb 9 09:47:10.320000 audit: BPF prog-id=157 op=UNLOAD Feb 9 09:47:10.320000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.320000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.320000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.320000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.320000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.320000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.320000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.320000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.320000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.320000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:10.320000 audit: BPF prog-id=159 op=LOAD Feb 9 09:47:10.320000 audit[3967]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=3926 pid=3967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:10.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932316630616336353531656331363262383533653137303030363034 Feb 9 09:47:10.348846 env[1730]: time="2024-02-09T09:47:10.348767997Z" level=info msg="StartContainer for \"921f0ac6551ec162b853e170006043faaf1a308f96007cad8b2a844da72243cd\" returns successfully" Feb 9 09:47:10.382736 systemd[1]: cri-containerd-921f0ac6551ec162b853e170006043faaf1a308f96007cad8b2a844da72243cd.scope: Deactivated successfully. Feb 9 09:47:10.386000 audit: BPF prog-id=159 op=UNLOAD Feb 9 09:47:10.451583 env[1730]: time="2024-02-09T09:47:10.451431173Z" level=info msg="shim disconnected" id=921f0ac6551ec162b853e170006043faaf1a308f96007cad8b2a844da72243cd Feb 9 09:47:10.452024 env[1730]: time="2024-02-09T09:47:10.451978176Z" level=warning msg="cleaning up after shim disconnected" id=921f0ac6551ec162b853e170006043faaf1a308f96007cad8b2a844da72243cd namespace=k8s.io Feb 9 09:47:10.452156 env[1730]: time="2024-02-09T09:47:10.452128909Z" level=info msg="cleaning up dead shim" Feb 9 09:47:10.465834 env[1730]: time="2024-02-09T09:47:10.465779081Z" level=warning msg="cleanup warnings time=\"2024-02-09T09:47:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4003 runtime=io.containerd.runc.v2\n" Feb 9 09:47:10.691698 env[1730]: time="2024-02-09T09:47:10.689257277Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\"" Feb 9 09:47:10.921832 systemd[1]: run-containerd-runc-k8s.io-0ad48ae943aa64d0c10a690176f0e01855ec424d3f2af45be8e629f663290e88-runc.8h1acF.mount: Deactivated successfully. Feb 9 09:47:11.387688 kubelet[2782]: E0209 09:47:11.387633 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xk7qk" podUID="bc0b6437-68a5-497b-8560-3205bb08c4b9" Feb 9 09:47:11.393316 kubelet[2782]: I0209 09:47:11.393263 2782 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4" path="/var/lib/kubelet/pods/f9f3b778-e7e5-46c1-8f6c-32ce0dbbf7f4/volumes" Feb 9 09:47:12.159524 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2959001600.mount: Deactivated successfully. Feb 9 09:47:13.387804 kubelet[2782]: E0209 09:47:13.387337 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xk7qk" podUID="bc0b6437-68a5-497b-8560-3205bb08c4b9" Feb 9 09:47:15.389328 kubelet[2782]: E0209 09:47:15.389254 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xk7qk" podUID="bc0b6437-68a5-497b-8560-3205bb08c4b9" Feb 9 09:47:16.820468 env[1730]: time="2024-02-09T09:47:16.820411821Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:16.824333 env[1730]: time="2024-02-09T09:47:16.824282777Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9c9318f5fbf505fc3d84676966009a3887e58ea1e3eac10039e5a96dfceb254b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:16.827046 env[1730]: time="2024-02-09T09:47:16.826978244Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:16.831493 env[1730]: time="2024-02-09T09:47:16.830791303Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:d943b4c23e82a39b0186a1a3b2fe8f728e543d503df72d7be521501a82b7e7b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:16.831493 env[1730]: time="2024-02-09T09:47:16.831399577Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\" returns image reference \"sha256:9c9318f5fbf505fc3d84676966009a3887e58ea1e3eac10039e5a96dfceb254b\"" Feb 9 09:47:16.838237 env[1730]: time="2024-02-09T09:47:16.838175215Z" level=info msg="CreateContainer within sandbox \"0ad48ae943aa64d0c10a690176f0e01855ec424d3f2af45be8e629f663290e88\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Feb 9 09:47:16.860883 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4079595350.mount: Deactivated successfully. Feb 9 09:47:16.871512 env[1730]: time="2024-02-09T09:47:16.871449211Z" level=info msg="CreateContainer within sandbox \"0ad48ae943aa64d0c10a690176f0e01855ec424d3f2af45be8e629f663290e88\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"31205206d2af777df4a6da35a70c79ae263e4e7991e734c8f1d3a995c8a41314\"" Feb 9 09:47:16.872871 env[1730]: time="2024-02-09T09:47:16.872820414Z" level=info msg="StartContainer for \"31205206d2af777df4a6da35a70c79ae263e4e7991e734c8f1d3a995c8a41314\"" Feb 9 09:47:16.913334 systemd[1]: Started cri-containerd-31205206d2af777df4a6da35a70c79ae263e4e7991e734c8f1d3a995c8a41314.scope. Feb 9 09:47:16.927510 systemd[1]: run-containerd-runc-k8s.io-31205206d2af777df4a6da35a70c79ae263e4e7991e734c8f1d3a995c8a41314-runc.MoN26M.mount: Deactivated successfully. Feb 9 09:47:16.970000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.974550 kernel: kauditd_printk_skb: 271 callbacks suppressed Feb 9 09:47:16.974648 kernel: audit: type=1400 audit(1707472036.970:1227): avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.970000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3926 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:16.996412 kernel: audit: type=1300 audit(1707472036.970:1227): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3926 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:16.970000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331323035323036643261663737376466346136646133356137306337 Feb 9 09:47:17.010211 kernel: audit: type=1327 audit(1707472036.970:1227): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331323035323036643261663737376466346136646133356137306337 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:17.021431 kernel: audit: type=1400 audit(1707472036.982:1228): avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:17.029287 kernel: audit: type=1400 audit(1707472036.982:1228): avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:17.042950 kernel: audit: type=1400 audit(1707472036.982:1228): avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:17.043098 kernel: audit: type=1400 audit(1707472036.982:1228): avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:17.057917 kernel: audit: type=1400 audit(1707472036.982:1228): avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:17.066023 kernel: audit: type=1400 audit(1707472036.982:1228): avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:17.074064 kernel: audit: type=1400 audit(1707472036.982:1228): avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit: BPF prog-id=160 op=LOAD Feb 9 09:47:16.982000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3926 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:16.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331323035323036643261663737376466346136646133356137306337 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit: BPF prog-id=161 op=LOAD Feb 9 09:47:16.982000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3926 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:16.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331323035323036643261663737376466346136646133356137306337 Feb 9 09:47:16.982000 audit: BPF prog-id=161 op=UNLOAD Feb 9 09:47:16.982000 audit: BPF prog-id=160 op=UNLOAD Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:16.982000 audit: BPF prog-id=162 op=LOAD Feb 9 09:47:16.982000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3926 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:16.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331323035323036643261663737376466346136646133356137306337 Feb 9 09:47:17.082102 env[1730]: time="2024-02-09T09:47:17.080261831Z" level=info msg="StartContainer for \"31205206d2af777df4a6da35a70c79ae263e4e7991e734c8f1d3a995c8a41314\" returns successfully" Feb 9 09:47:17.393370 kubelet[2782]: E0209 09:47:17.391571 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xk7qk" podUID="bc0b6437-68a5-497b-8560-3205bb08c4b9" Feb 9 09:47:18.045923 env[1730]: time="2024-02-09T09:47:18.045834526Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 9 09:47:18.051881 systemd[1]: cri-containerd-31205206d2af777df4a6da35a70c79ae263e4e7991e734c8f1d3a995c8a41314.scope: Deactivated successfully. Feb 9 09:47:18.057000 audit: BPF prog-id=162 op=UNLOAD Feb 9 09:47:18.090648 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-31205206d2af777df4a6da35a70c79ae263e4e7991e734c8f1d3a995c8a41314-rootfs.mount: Deactivated successfully. Feb 9 09:47:18.100652 kubelet[2782]: I0209 09:47:18.100610 2782 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Feb 9 09:47:18.145832 kubelet[2782]: I0209 09:47:18.145764 2782 topology_manager.go:215] "Topology Admit Handler" podUID="2190b54b-3544-41a9-8cc7-2ddf7fe17f69" podNamespace="kube-system" podName="coredns-5dd5756b68-vxrmz" Feb 9 09:47:18.155593 kubelet[2782]: I0209 09:47:18.154507 2782 topology_manager.go:215] "Topology Admit Handler" podUID="223b50ac-948a-4d46-a937-8e0470eff72c" podNamespace="calico-system" podName="calico-kube-controllers-66758d5cbb-p8v5t" Feb 9 09:47:18.157844 kubelet[2782]: I0209 09:47:18.157786 2782 topology_manager.go:215] "Topology Admit Handler" podUID="223a7223-a6dc-49ad-9622-bb87111cb4bb" podNamespace="kube-system" podName="coredns-5dd5756b68-nvh8j" Feb 9 09:47:18.169123 systemd[1]: Created slice kubepods-burstable-pod2190b54b_3544_41a9_8cc7_2ddf7fe17f69.slice. Feb 9 09:47:18.191892 systemd[1]: Created slice kubepods-burstable-pod223a7223_a6dc_49ad_9622_bb87111cb4bb.slice. Feb 9 09:47:18.205212 systemd[1]: Created slice kubepods-besteffort-pod223b50ac_948a_4d46_a937_8e0470eff72c.slice. Feb 9 09:47:18.278517 kubelet[2782]: I0209 09:47:18.278408 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/223a7223-a6dc-49ad-9622-bb87111cb4bb-config-volume\") pod \"coredns-5dd5756b68-nvh8j\" (UID: \"223a7223-a6dc-49ad-9622-bb87111cb4bb\") " pod="kube-system/coredns-5dd5756b68-nvh8j" Feb 9 09:47:18.278890 kubelet[2782]: I0209 09:47:18.278855 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pqjj8\" (UniqueName: \"kubernetes.io/projected/2190b54b-3544-41a9-8cc7-2ddf7fe17f69-kube-api-access-pqjj8\") pod \"coredns-5dd5756b68-vxrmz\" (UID: \"2190b54b-3544-41a9-8cc7-2ddf7fe17f69\") " pod="kube-system/coredns-5dd5756b68-vxrmz" Feb 9 09:47:18.279097 kubelet[2782]: I0209 09:47:18.279074 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/223b50ac-948a-4d46-a937-8e0470eff72c-tigera-ca-bundle\") pod \"calico-kube-controllers-66758d5cbb-p8v5t\" (UID: \"223b50ac-948a-4d46-a937-8e0470eff72c\") " pod="calico-system/calico-kube-controllers-66758d5cbb-p8v5t" Feb 9 09:47:18.279280 kubelet[2782]: I0209 09:47:18.279258 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/2190b54b-3544-41a9-8cc7-2ddf7fe17f69-config-volume\") pod \"coredns-5dd5756b68-vxrmz\" (UID: \"2190b54b-3544-41a9-8cc7-2ddf7fe17f69\") " pod="kube-system/coredns-5dd5756b68-vxrmz" Feb 9 09:47:18.279450 kubelet[2782]: I0209 09:47:18.279428 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kl67c\" (UniqueName: \"kubernetes.io/projected/223a7223-a6dc-49ad-9622-bb87111cb4bb-kube-api-access-kl67c\") pod \"coredns-5dd5756b68-nvh8j\" (UID: \"223a7223-a6dc-49ad-9622-bb87111cb4bb\") " pod="kube-system/coredns-5dd5756b68-nvh8j" Feb 9 09:47:18.279616 kubelet[2782]: I0209 09:47:18.279595 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pd48k\" (UniqueName: \"kubernetes.io/projected/223b50ac-948a-4d46-a937-8e0470eff72c-kube-api-access-pd48k\") pod \"calico-kube-controllers-66758d5cbb-p8v5t\" (UID: \"223b50ac-948a-4d46-a937-8e0470eff72c\") " pod="calico-system/calico-kube-controllers-66758d5cbb-p8v5t" Feb 9 09:47:18.478330 env[1730]: time="2024-02-09T09:47:18.478253961Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-vxrmz,Uid:2190b54b-3544-41a9-8cc7-2ddf7fe17f69,Namespace:kube-system,Attempt:0,}" Feb 9 09:47:18.500837 env[1730]: time="2024-02-09T09:47:18.499325928Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-nvh8j,Uid:223a7223-a6dc-49ad-9622-bb87111cb4bb,Namespace:kube-system,Attempt:0,}" Feb 9 09:47:18.510899 env[1730]: time="2024-02-09T09:47:18.510837699Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-66758d5cbb-p8v5t,Uid:223b50ac-948a-4d46-a937-8e0470eff72c,Namespace:calico-system,Attempt:0,}" Feb 9 09:47:19.279060 env[1730]: time="2024-02-09T09:47:19.278970652Z" level=info msg="shim disconnected" id=31205206d2af777df4a6da35a70c79ae263e4e7991e734c8f1d3a995c8a41314 Feb 9 09:47:19.279060 env[1730]: time="2024-02-09T09:47:19.279048507Z" level=warning msg="cleaning up after shim disconnected" id=31205206d2af777df4a6da35a70c79ae263e4e7991e734c8f1d3a995c8a41314 namespace=k8s.io Feb 9 09:47:19.279730 env[1730]: time="2024-02-09T09:47:19.279071718Z" level=info msg="cleaning up dead shim" Feb 9 09:47:19.305377 env[1730]: time="2024-02-09T09:47:19.305313237Z" level=warning msg="cleanup warnings time=\"2024-02-09T09:47:19Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4078 runtime=io.containerd.runc.v2\n" Feb 9 09:47:19.411736 systemd[1]: Created slice kubepods-besteffort-podbc0b6437_68a5_497b_8560_3205bb08c4b9.slice. Feb 9 09:47:19.418707 env[1730]: time="2024-02-09T09:47:19.418630054Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-xk7qk,Uid:bc0b6437-68a5-497b-8560-3205bb08c4b9,Namespace:calico-system,Attempt:0,}" Feb 9 09:47:19.549332 env[1730]: time="2024-02-09T09:47:19.548534720Z" level=error msg="Failed to destroy network for sandbox \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.549549 env[1730]: time="2024-02-09T09:47:19.549460242Z" level=error msg="encountered an error cleaning up failed sandbox \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.549635 env[1730]: time="2024-02-09T09:47:19.549576767Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-nvh8j,Uid:223a7223-a6dc-49ad-9622-bb87111cb4bb,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.550405 kubelet[2782]: E0209 09:47:19.550002 2782 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.550405 kubelet[2782]: E0209 09:47:19.550084 2782 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-nvh8j" Feb 9 09:47:19.550405 kubelet[2782]: E0209 09:47:19.550122 2782 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-nvh8j" Feb 9 09:47:19.551162 kubelet[2782]: E0209 09:47:19.550203 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-nvh8j_kube-system(223a7223-a6dc-49ad-9622-bb87111cb4bb)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-nvh8j_kube-system(223a7223-a6dc-49ad-9622-bb87111cb4bb)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-nvh8j" podUID="223a7223-a6dc-49ad-9622-bb87111cb4bb" Feb 9 09:47:19.598344 env[1730]: time="2024-02-09T09:47:19.598268254Z" level=error msg="Failed to destroy network for sandbox \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.599347 env[1730]: time="2024-02-09T09:47:19.599280681Z" level=error msg="encountered an error cleaning up failed sandbox \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.599602 env[1730]: time="2024-02-09T09:47:19.599537349Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-66758d5cbb-p8v5t,Uid:223b50ac-948a-4d46-a937-8e0470eff72c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.600406 kubelet[2782]: E0209 09:47:19.600208 2782 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.601049 kubelet[2782]: E0209 09:47:19.600828 2782 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-66758d5cbb-p8v5t" Feb 9 09:47:19.601049 kubelet[2782]: E0209 09:47:19.600978 2782 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-66758d5cbb-p8v5t" Feb 9 09:47:19.601764 kubelet[2782]: E0209 09:47:19.601490 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-66758d5cbb-p8v5t_calico-system(223b50ac-948a-4d46-a937-8e0470eff72c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-66758d5cbb-p8v5t_calico-system(223b50ac-948a-4d46-a937-8e0470eff72c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-66758d5cbb-p8v5t" podUID="223b50ac-948a-4d46-a937-8e0470eff72c" Feb 9 09:47:19.625130 env[1730]: time="2024-02-09T09:47:19.625056654Z" level=error msg="Failed to destroy network for sandbox \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.626117 env[1730]: time="2024-02-09T09:47:19.626051630Z" level=error msg="encountered an error cleaning up failed sandbox \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.626353 env[1730]: time="2024-02-09T09:47:19.626302561Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-vxrmz,Uid:2190b54b-3544-41a9-8cc7-2ddf7fe17f69,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.626920 kubelet[2782]: E0209 09:47:19.626879 2782 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.627161 kubelet[2782]: E0209 09:47:19.626982 2782 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-vxrmz" Feb 9 09:47:19.627161 kubelet[2782]: E0209 09:47:19.627077 2782 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-vxrmz" Feb 9 09:47:19.627301 kubelet[2782]: E0209 09:47:19.627219 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-vxrmz_kube-system(2190b54b-3544-41a9-8cc7-2ddf7fe17f69)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-vxrmz_kube-system(2190b54b-3544-41a9-8cc7-2ddf7fe17f69)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-vxrmz" podUID="2190b54b-3544-41a9-8cc7-2ddf7fe17f69" Feb 9 09:47:19.642161 env[1730]: time="2024-02-09T09:47:19.642081774Z" level=error msg="Failed to destroy network for sandbox \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.643040 env[1730]: time="2024-02-09T09:47:19.642983173Z" level=error msg="encountered an error cleaning up failed sandbox \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.643235 env[1730]: time="2024-02-09T09:47:19.643184801Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-xk7qk,Uid:bc0b6437-68a5-497b-8560-3205bb08c4b9,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.643747 kubelet[2782]: E0209 09:47:19.643666 2782 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.643891 kubelet[2782]: E0209 09:47:19.643814 2782 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-xk7qk" Feb 9 09:47:19.643891 kubelet[2782]: E0209 09:47:19.643856 2782 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-xk7qk" Feb 9 09:47:19.644048 kubelet[2782]: E0209 09:47:19.644005 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-xk7qk_calico-system(bc0b6437-68a5-497b-8560-3205bb08c4b9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-xk7qk_calico-system(bc0b6437-68a5-497b-8560-3205bb08c4b9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-xk7qk" podUID="bc0b6437-68a5-497b-8560-3205bb08c4b9" Feb 9 09:47:19.739210 kubelet[2782]: I0209 09:47:19.738374 2782 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:19.739703 env[1730]: time="2024-02-09T09:47:19.739633852Z" level=info msg="StopPodSandbox for \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\"" Feb 9 09:47:19.744395 kubelet[2782]: I0209 09:47:19.743668 2782 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:19.745795 env[1730]: time="2024-02-09T09:47:19.745742497Z" level=info msg="StopPodSandbox for \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\"" Feb 9 09:47:19.748289 kubelet[2782]: I0209 09:47:19.747654 2782 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:19.749526 env[1730]: time="2024-02-09T09:47:19.749447599Z" level=info msg="StopPodSandbox for \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\"" Feb 9 09:47:19.754896 kubelet[2782]: I0209 09:47:19.754271 2782 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:19.755362 env[1730]: time="2024-02-09T09:47:19.755312418Z" level=info msg="StopPodSandbox for \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\"" Feb 9 09:47:19.769711 env[1730]: time="2024-02-09T09:47:19.769613141Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\"" Feb 9 09:47:19.871851 env[1730]: time="2024-02-09T09:47:19.871752074Z" level=error msg="StopPodSandbox for \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\" failed" error="failed to destroy network for sandbox \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.872834 kubelet[2782]: E0209 09:47:19.872480 2782 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:19.872834 kubelet[2782]: E0209 09:47:19.872572 2782 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576"} Feb 9 09:47:19.872834 kubelet[2782]: E0209 09:47:19.872663 2782 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2190b54b-3544-41a9-8cc7-2ddf7fe17f69\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 09:47:19.872834 kubelet[2782]: E0209 09:47:19.872761 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2190b54b-3544-41a9-8cc7-2ddf7fe17f69\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-vxrmz" podUID="2190b54b-3544-41a9-8cc7-2ddf7fe17f69" Feb 9 09:47:19.903475 env[1730]: time="2024-02-09T09:47:19.903291128Z" level=error msg="StopPodSandbox for \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\" failed" error="failed to destroy network for sandbox \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.904416 kubelet[2782]: E0209 09:47:19.904098 2782 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:19.904416 kubelet[2782]: E0209 09:47:19.904183 2782 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57"} Feb 9 09:47:19.904416 kubelet[2782]: E0209 09:47:19.904281 2782 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"223b50ac-948a-4d46-a937-8e0470eff72c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 09:47:19.904416 kubelet[2782]: E0209 09:47:19.904364 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"223b50ac-948a-4d46-a937-8e0470eff72c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-66758d5cbb-p8v5t" podUID="223b50ac-948a-4d46-a937-8e0470eff72c" Feb 9 09:47:19.907174 env[1730]: time="2024-02-09T09:47:19.907097380Z" level=error msg="StopPodSandbox for \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\" failed" error="failed to destroy network for sandbox \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.907769 kubelet[2782]: E0209 09:47:19.907727 2782 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:19.907964 kubelet[2782]: E0209 09:47:19.907793 2782 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c"} Feb 9 09:47:19.907964 kubelet[2782]: E0209 09:47:19.907855 2782 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"bc0b6437-68a5-497b-8560-3205bb08c4b9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 09:47:19.907964 kubelet[2782]: E0209 09:47:19.907910 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"bc0b6437-68a5-497b-8560-3205bb08c4b9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-xk7qk" podUID="bc0b6437-68a5-497b-8560-3205bb08c4b9" Feb 9 09:47:19.913563 env[1730]: time="2024-02-09T09:47:19.913489913Z" level=error msg="StopPodSandbox for \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\" failed" error="failed to destroy network for sandbox \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 09:47:19.914474 kubelet[2782]: E0209 09:47:19.914144 2782 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:19.914474 kubelet[2782]: E0209 09:47:19.914223 2782 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708"} Feb 9 09:47:19.914474 kubelet[2782]: E0209 09:47:19.914314 2782 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"223a7223-a6dc-49ad-9622-bb87111cb4bb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 09:47:19.914474 kubelet[2782]: E0209 09:47:19.914420 2782 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"223a7223-a6dc-49ad-9622-bb87111cb4bb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-nvh8j" podUID="223a7223-a6dc-49ad-9622-bb87111cb4bb" Feb 9 09:47:20.286156 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57-shm.mount: Deactivated successfully. Feb 9 09:47:20.286338 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576-shm.mount: Deactivated successfully. Feb 9 09:47:20.286484 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708-shm.mount: Deactivated successfully. Feb 9 09:47:29.233947 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount170889328.mount: Deactivated successfully. Feb 9 09:47:29.350613 env[1730]: time="2024-02-09T09:47:29.348509460Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:29.361004 env[1730]: time="2024-02-09T09:47:29.360763431Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c445639cb28807ced09724016dc3b273b170b14d3b3d0c39b1affa1cc6b68774,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:29.370006 env[1730]: time="2024-02-09T09:47:29.369939651Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:29.378843 env[1730]: time="2024-02-09T09:47:29.378772784Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:a45dffb21a0e9ca8962f36359a2ab776beeecd93843543c2fa1745d7bbb0f754,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:29.380269 env[1730]: time="2024-02-09T09:47:29.380185674Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\" returns image reference \"sha256:c445639cb28807ced09724016dc3b273b170b14d3b3d0c39b1affa1cc6b68774\"" Feb 9 09:47:29.420831 env[1730]: time="2024-02-09T09:47:29.420551651Z" level=info msg="CreateContainer within sandbox \"0ad48ae943aa64d0c10a690176f0e01855ec424d3f2af45be8e629f663290e88\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Feb 9 09:47:29.463186 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount111918565.mount: Deactivated successfully. Feb 9 09:47:29.469087 env[1730]: time="2024-02-09T09:47:29.469006656Z" level=info msg="CreateContainer within sandbox \"0ad48ae943aa64d0c10a690176f0e01855ec424d3f2af45be8e629f663290e88\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"38d808b7dbec68999caf5fd806b8883f3700c223536482e50227ae1ae3f949fb\"" Feb 9 09:47:29.471246 env[1730]: time="2024-02-09T09:47:29.470207947Z" level=info msg="StartContainer for \"38d808b7dbec68999caf5fd806b8883f3700c223536482e50227ae1ae3f949fb\"" Feb 9 09:47:29.504388 systemd[1]: Started cri-containerd-38d808b7dbec68999caf5fd806b8883f3700c223536482e50227ae1ae3f949fb.scope. Feb 9 09:47:29.553000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.556008 kernel: kauditd_printk_skb: 34 callbacks suppressed Feb 9 09:47:29.556120 kernel: audit: type=1400 audit(1707472049.553:1234): avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.553000 audit[4308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3926 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:29.574940 kernel: audit: type=1300 audit(1707472049.553:1234): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3926 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:29.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338643830386237646265633638393939636166356664383036623838 Feb 9 09:47:29.585370 kernel: audit: type=1327 audit(1707472049.553:1234): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338643830386237646265633638393939636166356664383036623838 Feb 9 09:47:29.585822 kernel: audit: type=1400 audit(1707472049.557:1235): avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.557000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.557000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.601198 kernel: audit: type=1400 audit(1707472049.557:1235): avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.557000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.612656 kernel: audit: type=1400 audit(1707472049.557:1235): avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.557000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.620654 kernel: audit: type=1400 audit(1707472049.557:1235): avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.557000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.629819 kernel: audit: type=1400 audit(1707472049.557:1235): avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.557000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.637468 kernel: audit: type=1400 audit(1707472049.557:1235): avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.648452 kernel: audit: type=1400 audit(1707472049.557:1235): avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.557000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.557000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.557000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.557000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.557000 audit: BPF prog-id=163 op=LOAD Feb 9 09:47:29.557000 audit[4308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3926 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:29.557000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338643830386237646265633638393939636166356664383036623838 Feb 9 09:47:29.562000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.562000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.562000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.562000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.562000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.562000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.562000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.562000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.562000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.562000 audit: BPF prog-id=164 op=LOAD Feb 9 09:47:29.562000 audit[4308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3926 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:29.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338643830386237646265633638393939636166356664383036623838 Feb 9 09:47:29.563000 audit: BPF prog-id=164 op=UNLOAD Feb 9 09:47:29.563000 audit: BPF prog-id=163 op=UNLOAD Feb 9 09:47:29.563000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.563000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.563000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.563000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.563000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.563000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.563000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.563000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.563000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.563000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:29.563000 audit: BPF prog-id=165 op=LOAD Feb 9 09:47:29.563000 audit[4308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3926 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:29.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338643830386237646265633638393939636166356664383036623838 Feb 9 09:47:29.657183 env[1730]: time="2024-02-09T09:47:29.656075709Z" level=info msg="StartContainer for \"38d808b7dbec68999caf5fd806b8883f3700c223536482e50227ae1ae3f949fb\" returns successfully" Feb 9 09:47:29.766480 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Feb 9 09:47:29.766638 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Feb 9 09:47:29.820661 kubelet[2782]: I0209 09:47:29.820603 2782 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-rt7ww" podStartSLOduration=2.127820424 podCreationTimestamp="2024-02-09 09:47:09 +0000 UTC" firstStartedPulling="2024-02-09 09:47:10.688735022 +0000 UTC m=+30.045388370" lastFinishedPulling="2024-02-09 09:47:29.381432246 +0000 UTC m=+48.738085606" observedRunningTime="2024-02-09 09:47:29.819837918 +0000 UTC m=+49.176491290" watchObservedRunningTime="2024-02-09 09:47:29.82051766 +0000 UTC m=+49.177171020" Feb 9 09:47:31.382000 audit[4401]: AVC avc: denied { write } for pid=4401 comm="tee" name="fd" dev="proc" ino=21298 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 09:47:31.382000 audit[4401]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffebe36985 a2=241 a3=1b6 items=1 ppid=4382 pid=4401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:31.382000 audit: CWD cwd="/etc/service/enabled/bird6/log" Feb 9 09:47:31.382000 audit: PATH item=0 name="/dev/fd/63" inode=21288 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 09:47:31.382000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 09:47:31.386000 audit[4417]: AVC avc: denied { write } for pid=4417 comm="tee" name="fd" dev="proc" ino=21302 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 09:47:31.386000 audit[4417]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc39d5985 a2=241 a3=1b6 items=1 ppid=4375 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:31.386000 audit: CWD cwd="/etc/service/enabled/felix/log" Feb 9 09:47:31.386000 audit: PATH item=0 name="/dev/fd/63" inode=22106 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 09:47:31.386000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 09:47:31.392544 env[1730]: time="2024-02-09T09:47:31.392478324Z" level=info msg="StopPodSandbox for \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\"" Feb 9 09:47:31.439000 audit[4428]: AVC avc: denied { write } for pid=4428 comm="tee" name="fd" dev="proc" ino=22139 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 09:47:31.439000 audit[4428]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe7b24986 a2=241 a3=1b6 items=1 ppid=4373 pid=4428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:31.439000 audit: CWD cwd="/etc/service/enabled/bird/log" Feb 9 09:47:31.439000 audit: PATH item=0 name="/dev/fd/63" inode=21306 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 09:47:31.439000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 09:47:31.482000 audit[4446]: AVC avc: denied { write } for pid=4446 comm="tee" name="fd" dev="proc" ino=22146 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 09:47:31.482000 audit[4446]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffca0ae987 a2=241 a3=1b6 items=1 ppid=4376 pid=4446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:31.482000 audit: CWD cwd="/etc/service/enabled/cni/log" Feb 9 09:47:31.482000 audit: PATH item=0 name="/dev/fd/63" inode=21310 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 09:47:31.482000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 09:47:31.560000 audit[4458]: AVC avc: denied { write } for pid=4458 comm="tee" name="fd" dev="proc" ino=21325 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 09:47:31.565000 audit[4460]: AVC avc: denied { write } for pid=4460 comm="tee" name="fd" dev="proc" ino=21331 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 09:47:31.565000 audit[4460]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc5cbe985 a2=241 a3=1b6 items=1 ppid=4383 pid=4460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:31.565000 audit: CWD cwd="/etc/service/enabled/confd/log" Feb 9 09:47:31.562000 audit[4455]: AVC avc: denied { write } for pid=4455 comm="tee" name="fd" dev="proc" ino=21333 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 09:47:31.562000 audit[4455]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc70f6976 a2=241 a3=1b6 items=1 ppid=4379 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:31.562000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Feb 9 09:47:31.562000 audit: PATH item=0 name="/dev/fd/63" inode=22152 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 09:47:31.562000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 09:47:31.565000 audit: PATH item=0 name="/dev/fd/63" inode=22156 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 09:47:31.565000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 09:47:31.560000 audit[4458]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffede54975 a2=241 a3=1b6 items=1 ppid=4377 pid=4458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:31.560000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Feb 9 09:47:31.560000 audit: PATH item=0 name="/dev/fd/63" inode=22155 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 09:47:31.560000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 09:47:31.703947 env[1730]: 2024-02-09 09:47:31.586 [INFO][4440] k8s.go 578: Cleaning up netns ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:31.703947 env[1730]: 2024-02-09 09:47:31.586 [INFO][4440] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" iface="eth0" netns="/var/run/netns/cni-c258e733-2e7e-2b2e-9f34-9c015f0531f9" Feb 9 09:47:31.703947 env[1730]: 2024-02-09 09:47:31.587 [INFO][4440] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" iface="eth0" netns="/var/run/netns/cni-c258e733-2e7e-2b2e-9f34-9c015f0531f9" Feb 9 09:47:31.703947 env[1730]: 2024-02-09 09:47:31.588 [INFO][4440] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" iface="eth0" netns="/var/run/netns/cni-c258e733-2e7e-2b2e-9f34-9c015f0531f9" Feb 9 09:47:31.703947 env[1730]: 2024-02-09 09:47:31.588 [INFO][4440] k8s.go 585: Releasing IP address(es) ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:31.703947 env[1730]: 2024-02-09 09:47:31.588 [INFO][4440] utils.go 188: Calico CNI releasing IP address ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:31.703947 env[1730]: 2024-02-09 09:47:31.666 [INFO][4464] ipam_plugin.go 415: Releasing address using handleID ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" HandleID="k8s-pod-network.4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:31.703947 env[1730]: 2024-02-09 09:47:31.667 [INFO][4464] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:31.703947 env[1730]: 2024-02-09 09:47:31.668 [INFO][4464] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:31.703947 env[1730]: 2024-02-09 09:47:31.685 [WARNING][4464] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" HandleID="k8s-pod-network.4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:31.703947 env[1730]: 2024-02-09 09:47:31.685 [INFO][4464] ipam_plugin.go 443: Releasing address using workloadID ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" HandleID="k8s-pod-network.4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:31.703947 env[1730]: 2024-02-09 09:47:31.694 [INFO][4464] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:31.703947 env[1730]: 2024-02-09 09:47:31.698 [INFO][4440] k8s.go 591: Teardown processing complete. ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:31.714165 systemd[1]: run-netns-cni\x2dc258e733\x2d2e7e\x2d2b2e\x2d9f34\x2d9c015f0531f9.mount: Deactivated successfully. Feb 9 09:47:31.715614 env[1730]: time="2024-02-09T09:47:31.715552346Z" level=info msg="TearDown network for sandbox \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\" successfully" Feb 9 09:47:31.715929 env[1730]: time="2024-02-09T09:47:31.715859552Z" level=info msg="StopPodSandbox for \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\" returns successfully" Feb 9 09:47:31.717506 env[1730]: time="2024-02-09T09:47:31.717440379Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-vxrmz,Uid:2190b54b-3544-41a9-8cc7-2ddf7fe17f69,Namespace:kube-system,Attempt:1,}" Feb 9 09:47:32.213740 (udev-worker)[4506]: Network interface NamePolicy= disabled on kernel command line. Feb 9 09:47:32.217073 systemd-networkd[1537]: califb8d9ff4ac0: Link UP Feb 9 09:47:32.224316 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 09:47:32.224777 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califb8d9ff4ac0: link becomes ready Feb 9 09:47:32.225074 systemd-networkd[1537]: califb8d9ff4ac0: Gained carrier Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:31.895 [INFO][4477] utils.go 100: File /var/lib/calico/mtu does not exist Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:31.934 [INFO][4477] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0 coredns-5dd5756b68- kube-system 2190b54b-3544-41a9-8cc7-2ddf7fe17f69 774 0 2024-02-09 09:46:53 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-17-0 coredns-5dd5756b68-vxrmz eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] califb8d9ff4ac0 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" Namespace="kube-system" Pod="coredns-5dd5756b68-vxrmz" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-" Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:31.934 [INFO][4477] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" Namespace="kube-system" Pod="coredns-5dd5756b68-vxrmz" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.064 [INFO][4490] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" HandleID="k8s-pod-network.57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.091 [INFO][4490] ipam_plugin.go 268: Auto assigning IP ContainerID="57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" HandleID="k8s-pod-network.57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002bcaa0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-17-0", "pod":"coredns-5dd5756b68-vxrmz", "timestamp":"2024-02-09 09:47:32.064265425 +0000 UTC"}, Hostname:"ip-172-31-17-0", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.091 [INFO][4490] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.091 [INFO][4490] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.091 [INFO][4490] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-0' Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.111 [INFO][4490] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" host="ip-172-31-17-0" Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.126 [INFO][4490] ipam.go 372: Looking up existing affinities for host host="ip-172-31-17-0" Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.137 [INFO][4490] ipam.go 489: Trying affinity for 192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.140 [INFO][4490] ipam.go 155: Attempting to load block cidr=192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.147 [INFO][4490] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.147 [INFO][4490] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.83.0/26 handle="k8s-pod-network.57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" host="ip-172-31-17-0" Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.153 [INFO][4490] ipam.go 1682: Creating new handle: k8s-pod-network.57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829 Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.171 [INFO][4490] ipam.go 1203: Writing block in order to claim IPs block=192.168.83.0/26 handle="k8s-pod-network.57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" host="ip-172-31-17-0" Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.187 [INFO][4490] ipam.go 1216: Successfully claimed IPs: [192.168.83.1/26] block=192.168.83.0/26 handle="k8s-pod-network.57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" host="ip-172-31-17-0" Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.188 [INFO][4490] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.83.1/26] handle="k8s-pod-network.57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" host="ip-172-31-17-0" Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.188 [INFO][4490] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:32.250197 env[1730]: 2024-02-09 09:47:32.188 [INFO][4490] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.83.1/26] IPv6=[] ContainerID="57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" HandleID="k8s-pod-network.57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:32.251694 env[1730]: 2024-02-09 09:47:32.193 [INFO][4477] k8s.go 385: Populated endpoint ContainerID="57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" Namespace="kube-system" Pod="coredns-5dd5756b68-vxrmz" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"2190b54b-3544-41a9-8cc7-2ddf7fe17f69", ResourceVersion:"774", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 46, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"", Pod:"coredns-5dd5756b68-vxrmz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"califb8d9ff4ac0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:32.251694 env[1730]: 2024-02-09 09:47:32.193 [INFO][4477] k8s.go 386: Calico CNI using IPs: [192.168.83.1/32] ContainerID="57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" Namespace="kube-system" Pod="coredns-5dd5756b68-vxrmz" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:32.251694 env[1730]: 2024-02-09 09:47:32.193 [INFO][4477] dataplane_linux.go 68: Setting the host side veth name to califb8d9ff4ac0 ContainerID="57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" Namespace="kube-system" Pod="coredns-5dd5756b68-vxrmz" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:32.251694 env[1730]: 2024-02-09 09:47:32.223 [INFO][4477] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" Namespace="kube-system" Pod="coredns-5dd5756b68-vxrmz" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:32.251694 env[1730]: 2024-02-09 09:47:32.224 [INFO][4477] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" Namespace="kube-system" Pod="coredns-5dd5756b68-vxrmz" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"2190b54b-3544-41a9-8cc7-2ddf7fe17f69", ResourceVersion:"774", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 46, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829", Pod:"coredns-5dd5756b68-vxrmz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"califb8d9ff4ac0", MAC:"0e:3f:05:fe:e3:46", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:32.251694 env[1730]: 2024-02-09 09:47:32.246 [INFO][4477] k8s.go 491: Wrote updated endpoint to datastore ContainerID="57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829" Namespace="kube-system" Pod="coredns-5dd5756b68-vxrmz" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:32.295165 env[1730]: time="2024-02-09T09:47:32.295052015Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:47:32.295499 env[1730]: time="2024-02-09T09:47:32.295400565Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:47:32.295704 env[1730]: time="2024-02-09T09:47:32.295630057Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:47:32.297002 env[1730]: time="2024-02-09T09:47:32.296217374Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829 pid=4526 runtime=io.containerd.runc.v2 Feb 9 09:47:32.350688 systemd[1]: Started cri-containerd-57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829.scope. Feb 9 09:47:32.389952 env[1730]: time="2024-02-09T09:47:32.389898178Z" level=info msg="StopPodSandbox for \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\"" Feb 9 09:47:32.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.455000 audit: BPF prog-id=166 op=LOAD Feb 9 09:47:32.461000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.461000 audit[4535]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4526 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:32.461000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537373736616264393537653362353331633432333964373461333438 Feb 9 09:47:32.465000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.465000 audit[4535]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4526 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:32.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537373736616264393537653362353331633432333964373461333438 Feb 9 09:47:32.470000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.470000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.470000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.470000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.470000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.470000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.470000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.470000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.470000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.470000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.470000 audit: BPF prog-id=167 op=LOAD Feb 9 09:47:32.470000 audit[4535]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4526 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:32.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537373736616264393537653362353331633432333964373461333438 Feb 9 09:47:32.472000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.472000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.472000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.472000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.472000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.472000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.472000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.472000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.472000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.472000 audit: BPF prog-id=168 op=LOAD Feb 9 09:47:32.472000 audit[4535]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4526 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:32.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537373736616264393537653362353331633432333964373461333438 Feb 9 09:47:32.473000 audit: BPF prog-id=168 op=UNLOAD Feb 9 09:47:32.474000 audit: BPF prog-id=167 op=UNLOAD Feb 9 09:47:32.474000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.474000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.474000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.474000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.474000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.474000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.474000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.474000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.474000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.474000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.474000 audit: BPF prog-id=169 op=LOAD Feb 9 09:47:32.474000 audit[4535]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4526 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:32.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537373736616264393537653362353331633432333964373461333438 Feb 9 09:47:32.691771 env[1730]: time="2024-02-09T09:47:32.691715544Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-vxrmz,Uid:2190b54b-3544-41a9-8cc7-2ddf7fe17f69,Namespace:kube-system,Attempt:1,} returns sandbox id \"57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829\"" Feb 9 09:47:32.707325 systemd[1]: run-containerd-runc-k8s.io-57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829-runc.o7XZjD.mount: Deactivated successfully. Feb 9 09:47:32.722988 env[1730]: time="2024-02-09T09:47:32.722045025Z" level=info msg="CreateContainer within sandbox \"57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 9 09:47:32.752956 env[1730]: 2024-02-09 09:47:32.567 [INFO][4571] k8s.go 578: Cleaning up netns ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:32.752956 env[1730]: 2024-02-09 09:47:32.567 [INFO][4571] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" iface="eth0" netns="/var/run/netns/cni-7195d438-6e3d-4d10-a200-580925780a96" Feb 9 09:47:32.752956 env[1730]: 2024-02-09 09:47:32.568 [INFO][4571] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" iface="eth0" netns="/var/run/netns/cni-7195d438-6e3d-4d10-a200-580925780a96" Feb 9 09:47:32.752956 env[1730]: 2024-02-09 09:47:32.568 [INFO][4571] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" iface="eth0" netns="/var/run/netns/cni-7195d438-6e3d-4d10-a200-580925780a96" Feb 9 09:47:32.752956 env[1730]: 2024-02-09 09:47:32.568 [INFO][4571] k8s.go 585: Releasing IP address(es) ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:32.752956 env[1730]: 2024-02-09 09:47:32.568 [INFO][4571] utils.go 188: Calico CNI releasing IP address ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:32.752956 env[1730]: 2024-02-09 09:47:32.683 [INFO][4588] ipam_plugin.go 415: Releasing address using handleID ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" HandleID="k8s-pod-network.bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Workload="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:32.752956 env[1730]: 2024-02-09 09:47:32.683 [INFO][4588] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:32.752956 env[1730]: 2024-02-09 09:47:32.683 [INFO][4588] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:32.752956 env[1730]: 2024-02-09 09:47:32.728 [WARNING][4588] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" HandleID="k8s-pod-network.bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Workload="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:32.752956 env[1730]: 2024-02-09 09:47:32.728 [INFO][4588] ipam_plugin.go 443: Releasing address using workloadID ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" HandleID="k8s-pod-network.bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Workload="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:32.752956 env[1730]: 2024-02-09 09:47:32.734 [INFO][4588] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:32.752956 env[1730]: 2024-02-09 09:47:32.738 [INFO][4571] k8s.go 591: Teardown processing complete. ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:32.759842 systemd[1]: run-netns-cni\x2d7195d438\x2d6e3d\x2d4d10\x2da200\x2d580925780a96.mount: Deactivated successfully. Feb 9 09:47:32.761431 env[1730]: time="2024-02-09T09:47:32.761371051Z" level=info msg="TearDown network for sandbox \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\" successfully" Feb 9 09:47:32.761651 env[1730]: time="2024-02-09T09:47:32.761612289Z" level=info msg="StopPodSandbox for \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\" returns successfully" Feb 9 09:47:32.762899 env[1730]: time="2024-02-09T09:47:32.762830885Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-66758d5cbb-p8v5t,Uid:223b50ac-948a-4d46-a937-8e0470eff72c,Namespace:calico-system,Attempt:1,}" Feb 9 09:47:32.777862 env[1730]: time="2024-02-09T09:47:32.777792794Z" level=info msg="CreateContainer within sandbox \"57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"f9aa3e0ea0ee9f3300b5aedcc2f76c4996a50608556352fcdc53b8e2920382d1\"" Feb 9 09:47:32.781577 env[1730]: time="2024-02-09T09:47:32.781506605Z" level=info msg="StartContainer for \"f9aa3e0ea0ee9f3300b5aedcc2f76c4996a50608556352fcdc53b8e2920382d1\"" Feb 9 09:47:32.860895 systemd[1]: Started cri-containerd-f9aa3e0ea0ee9f3300b5aedcc2f76c4996a50608556352fcdc53b8e2920382d1.scope. Feb 9 09:47:32.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.917000 audit: BPF prog-id=170 op=LOAD Feb 9 09:47:32.918000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.918000 audit[4621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4526 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:32.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639616133653065613065653966333330306235616564636332663736 Feb 9 09:47:32.918000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.918000 audit[4621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4526 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:32.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639616133653065613065653966333330306235616564636332663736 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit: BPF prog-id=171 op=LOAD Feb 9 09:47:32.919000 audit[4621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4526 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:32.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639616133653065613065653966333330306235616564636332663736 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit: BPF prog-id=172 op=LOAD Feb 9 09:47:32.919000 audit[4621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4526 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:32.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639616133653065613065653966333330306235616564636332663736 Feb 9 09:47:32.919000 audit: BPF prog-id=172 op=UNLOAD Feb 9 09:47:32.919000 audit: BPF prog-id=171 op=UNLOAD Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:32.919000 audit: BPF prog-id=173 op=LOAD Feb 9 09:47:32.919000 audit[4621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4526 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:32.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639616133653065613065653966333330306235616564636332663736 Feb 9 09:47:32.998189 env[1730]: time="2024-02-09T09:47:32.997886507Z" level=info msg="StartContainer for \"f9aa3e0ea0ee9f3300b5aedcc2f76c4996a50608556352fcdc53b8e2920382d1\" returns successfully" Feb 9 09:47:33.153455 systemd-networkd[1537]: cali542605f9b47: Link UP Feb 9 09:47:33.157813 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali542605f9b47: link becomes ready Feb 9 09:47:33.157394 (udev-worker)[4341]: Network interface NamePolicy= disabled on kernel command line. Feb 9 09:47:33.158371 systemd-networkd[1537]: cali542605f9b47: Gained carrier Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:32.953 [INFO][4620] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0 calico-kube-controllers-66758d5cbb- calico-system 223b50ac-948a-4d46-a937-8e0470eff72c 785 0 2024-02-09 09:47:03 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:66758d5cbb projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-17-0 calico-kube-controllers-66758d5cbb-p8v5t eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali542605f9b47 [] []}} ContainerID="7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" Namespace="calico-system" Pod="calico-kube-controllers-66758d5cbb-p8v5t" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-" Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:32.954 [INFO][4620] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" Namespace="calico-system" Pod="calico-kube-controllers-66758d5cbb-p8v5t" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.053 [INFO][4659] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" HandleID="k8s-pod-network.7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" Workload="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.075 [INFO][4659] ipam_plugin.go 268: Auto assigning IP ContainerID="7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" HandleID="k8s-pod-network.7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" Workload="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002948e0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-17-0", "pod":"calico-kube-controllers-66758d5cbb-p8v5t", "timestamp":"2024-02-09 09:47:33.053621943 +0000 UTC"}, Hostname:"ip-172-31-17-0", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.075 [INFO][4659] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.076 [INFO][4659] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.076 [INFO][4659] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-0' Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.078 [INFO][4659] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" host="ip-172-31-17-0" Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.087 [INFO][4659] ipam.go 372: Looking up existing affinities for host host="ip-172-31-17-0" Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.105 [INFO][4659] ipam.go 489: Trying affinity for 192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.108 [INFO][4659] ipam.go 155: Attempting to load block cidr=192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.113 [INFO][4659] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.114 [INFO][4659] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.83.0/26 handle="k8s-pod-network.7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" host="ip-172-31-17-0" Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.119 [INFO][4659] ipam.go 1682: Creating new handle: k8s-pod-network.7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2 Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.132 [INFO][4659] ipam.go 1203: Writing block in order to claim IPs block=192.168.83.0/26 handle="k8s-pod-network.7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" host="ip-172-31-17-0" Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.145 [INFO][4659] ipam.go 1216: Successfully claimed IPs: [192.168.83.2/26] block=192.168.83.0/26 handle="k8s-pod-network.7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" host="ip-172-31-17-0" Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.145 [INFO][4659] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.83.2/26] handle="k8s-pod-network.7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" host="ip-172-31-17-0" Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.145 [INFO][4659] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:33.189460 env[1730]: 2024-02-09 09:47:33.145 [INFO][4659] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.83.2/26] IPv6=[] ContainerID="7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" HandleID="k8s-pod-network.7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" Workload="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:33.190851 env[1730]: 2024-02-09 09:47:33.148 [INFO][4620] k8s.go 385: Populated endpoint ContainerID="7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" Namespace="calico-system" Pod="calico-kube-controllers-66758d5cbb-p8v5t" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0", GenerateName:"calico-kube-controllers-66758d5cbb-", Namespace:"calico-system", SelfLink:"", UID:"223b50ac-948a-4d46-a937-8e0470eff72c", ResourceVersion:"785", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 47, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"66758d5cbb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"", Pod:"calico-kube-controllers-66758d5cbb-p8v5t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.83.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali542605f9b47", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:33.190851 env[1730]: 2024-02-09 09:47:33.148 [INFO][4620] k8s.go 386: Calico CNI using IPs: [192.168.83.2/32] ContainerID="7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" Namespace="calico-system" Pod="calico-kube-controllers-66758d5cbb-p8v5t" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:33.190851 env[1730]: 2024-02-09 09:47:33.149 [INFO][4620] dataplane_linux.go 68: Setting the host side veth name to cali542605f9b47 ContainerID="7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" Namespace="calico-system" Pod="calico-kube-controllers-66758d5cbb-p8v5t" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:33.190851 env[1730]: 2024-02-09 09:47:33.152 [INFO][4620] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" Namespace="calico-system" Pod="calico-kube-controllers-66758d5cbb-p8v5t" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:33.190851 env[1730]: 2024-02-09 09:47:33.170 [INFO][4620] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" Namespace="calico-system" Pod="calico-kube-controllers-66758d5cbb-p8v5t" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0", GenerateName:"calico-kube-controllers-66758d5cbb-", Namespace:"calico-system", SelfLink:"", UID:"223b50ac-948a-4d46-a937-8e0470eff72c", ResourceVersion:"785", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 47, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"66758d5cbb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2", Pod:"calico-kube-controllers-66758d5cbb-p8v5t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.83.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali542605f9b47", MAC:"2e:64:89:1b:2c:59", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:33.190851 env[1730]: 2024-02-09 09:47:33.186 [INFO][4620] k8s.go 491: Wrote updated endpoint to datastore ContainerID="7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2" Namespace="calico-system" Pod="calico-kube-controllers-66758d5cbb-p8v5t" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:33.232865 env[1730]: time="2024-02-09T09:47:33.232728808Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:47:33.233206 env[1730]: time="2024-02-09T09:47:33.233123039Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:47:33.233398 env[1730]: time="2024-02-09T09:47:33.233340630Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:47:33.234301 env[1730]: time="2024-02-09T09:47:33.234190752Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2 pid=4694 runtime=io.containerd.runc.v2 Feb 9 09:47:33.270728 systemd[1]: Started cri-containerd-7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2.scope. Feb 9 09:47:33.389320 env[1730]: time="2024-02-09T09:47:33.389247726Z" level=info msg="StopPodSandbox for \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\"" Feb 9 09:47:33.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.422000 audit: BPF prog-id=174 op=LOAD Feb 9 09:47:33.424000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.424000 audit[4706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4694 pid=4706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:33.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766636637656534393339386663316162313131353364363033336466 Feb 9 09:47:33.424000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.424000 audit[4706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4694 pid=4706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:33.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766636637656534393339386663316162313131353364363033336466 Feb 9 09:47:33.424000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.424000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.424000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.424000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.424000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.424000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.424000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.424000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.424000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.424000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.424000 audit: BPF prog-id=175 op=LOAD Feb 9 09:47:33.424000 audit[4706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4694 pid=4706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:33.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766636637656534393339386663316162313131353364363033336466 Feb 9 09:47:33.425000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.425000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.425000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.425000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.425000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.425000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.425000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.425000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.425000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.425000 audit: BPF prog-id=176 op=LOAD Feb 9 09:47:33.425000 audit[4706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4694 pid=4706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:33.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766636637656534393339386663316162313131353364363033336466 Feb 9 09:47:33.425000 audit: BPF prog-id=176 op=UNLOAD Feb 9 09:47:33.425000 audit: BPF prog-id=175 op=UNLOAD Feb 9 09:47:33.428000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.428000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.428000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.428000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.428000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.428000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.428000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.428000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.428000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.428000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:33.428000 audit: BPF prog-id=177 op=LOAD Feb 9 09:47:33.428000 audit[4706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4694 pid=4706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:33.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766636637656534393339386663316162313131353364363033336466 Feb 9 09:47:33.712957 env[1730]: 2024-02-09 09:47:33.535 [INFO][4742] k8s.go 578: Cleaning up netns ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:33.712957 env[1730]: 2024-02-09 09:47:33.536 [INFO][4742] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" iface="eth0" netns="/var/run/netns/cni-58b27baa-10a4-1ac0-ecc0-efbe13200621" Feb 9 09:47:33.712957 env[1730]: 2024-02-09 09:47:33.537 [INFO][4742] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" iface="eth0" netns="/var/run/netns/cni-58b27baa-10a4-1ac0-ecc0-efbe13200621" Feb 9 09:47:33.712957 env[1730]: 2024-02-09 09:47:33.537 [INFO][4742] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" iface="eth0" netns="/var/run/netns/cni-58b27baa-10a4-1ac0-ecc0-efbe13200621" Feb 9 09:47:33.712957 env[1730]: 2024-02-09 09:47:33.537 [INFO][4742] k8s.go 585: Releasing IP address(es) ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:33.712957 env[1730]: 2024-02-09 09:47:33.537 [INFO][4742] utils.go 188: Calico CNI releasing IP address ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:33.712957 env[1730]: 2024-02-09 09:47:33.652 [INFO][4750] ipam_plugin.go 415: Releasing address using handleID ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" HandleID="k8s-pod-network.60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Workload="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:33.712957 env[1730]: 2024-02-09 09:47:33.653 [INFO][4750] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:33.712957 env[1730]: 2024-02-09 09:47:33.653 [INFO][4750] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:33.712957 env[1730]: 2024-02-09 09:47:33.678 [WARNING][4750] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" HandleID="k8s-pod-network.60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Workload="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:33.712957 env[1730]: 2024-02-09 09:47:33.678 [INFO][4750] ipam_plugin.go 443: Releasing address using workloadID ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" HandleID="k8s-pod-network.60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Workload="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:33.712957 env[1730]: 2024-02-09 09:47:33.698 [INFO][4750] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:33.712957 env[1730]: 2024-02-09 09:47:33.702 [INFO][4742] k8s.go 591: Teardown processing complete. ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:33.737011 systemd[1]: run-netns-cni\x2d58b27baa\x2d10a4\x2d1ac0\x2decc0\x2defbe13200621.mount: Deactivated successfully. Feb 9 09:47:33.745638 systemd[1]: Started sshd@7-172.31.17.0:22-139.178.89.65:33880.service. Feb 9 09:47:33.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.17.0:22-139.178.89.65:33880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:33.784863 systemd-networkd[1537]: califb8d9ff4ac0: Gained IPv6LL Feb 9 09:47:33.795842 env[1730]: time="2024-02-09T09:47:33.795595449Z" level=info msg="TearDown network for sandbox \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\" successfully" Feb 9 09:47:33.795842 env[1730]: time="2024-02-09T09:47:33.795655477Z" level=info msg="StopPodSandbox for \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\" returns successfully" Feb 9 09:47:33.799588 env[1730]: time="2024-02-09T09:47:33.799077069Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-xk7qk,Uid:bc0b6437-68a5-497b-8560-3205bb08c4b9,Namespace:calico-system,Attempt:1,}" Feb 9 09:47:33.874022 kubelet[2782]: I0209 09:47:33.873538 2782 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-vxrmz" podStartSLOduration=40.873471487 podCreationTimestamp="2024-02-09 09:46:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 09:47:33.873200899 +0000 UTC m=+53.229854259" watchObservedRunningTime="2024-02-09 09:47:33.873471487 +0000 UTC m=+53.230124811" Feb 9 09:47:33.878007 env[1730]: time="2024-02-09T09:47:33.877947125Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-66758d5cbb-p8v5t,Uid:223b50ac-948a-4d46-a937-8e0470eff72c,Namespace:calico-system,Attempt:1,} returns sandbox id \"7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2\"" Feb 9 09:47:33.885410 env[1730]: time="2024-02-09T09:47:33.885355206Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\"" Feb 9 09:47:33.939593 systemd-networkd[1537]: vxlan.calico: Link UP Feb 9 09:47:33.939607 systemd-networkd[1537]: vxlan.calico: Gained carrier Feb 9 09:47:33.982000 audit[4770]: USER_ACCT pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:33.983667 sshd[4770]: Accepted publickey for core from 139.178.89.65 port 33880 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:47:33.985000 audit[4770]: CRED_ACQ pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:33.985000 audit[4770]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3c93970 a2=3 a3=1 items=0 ppid=1 pid=4770 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:33.985000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:47:33.987998 sshd[4770]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:47:34.006971 systemd[1]: Started session-8.scope. Feb 9 09:47:34.008503 systemd-logind[1716]: New session 8 of user core. Feb 9 09:47:34.020000 audit[4770]: USER_START pid=4770 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:34.023000 audit[4793]: CRED_ACQ pid=4793 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:34.025000 audit[4792]: NETFILTER_CFG table=filter:103 family=2 entries=14 op=nft_register_rule pid=4792 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:34.025000 audit[4792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffc656cc80 a2=0 a3=ffff99fc96c0 items=0 ppid=3176 pid=4792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.025000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:34.033000 audit[4792]: NETFILTER_CFG table=nat:104 family=2 entries=14 op=nft_register_rule pid=4792 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:34.033000 audit[4792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3300 a0=3 a1=ffffc656cc80 a2=0 a3=ffff99fc96c0 items=0 ppid=3176 pid=4792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.033000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit: BPF prog-id=178 op=LOAD Feb 9 09:47:34.094000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe86a33b8 a2=70 a3=0 items=0 ppid=4381 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.094000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 09:47:34.094000 audit: BPF prog-id=178 op=UNLOAD Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.094000 audit: BPF prog-id=179 op=LOAD Feb 9 09:47:34.094000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe86a33b8 a2=70 a3=4a174c items=0 ppid=4381 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.094000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 09:47:34.098000 audit: BPF prog-id=179 op=UNLOAD Feb 9 09:47:34.098000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.098000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffe86a33e8 a2=70 a3=2b27273f items=0 ppid=4381 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.098000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 09:47:34.132000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.132000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.132000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.132000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.132000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.132000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.132000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.132000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.132000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.132000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.132000 audit: BPF prog-id=180 op=LOAD Feb 9 09:47:34.132000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffe86a3338 a2=70 a3=2b272759 items=0 ppid=4381 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.132000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 09:47:34.140000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.140000 audit[4816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd66d5948 a2=70 a3=0 items=0 ppid=4381 pid=4816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.140000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 9 09:47:34.141000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.141000 audit[4816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd66d5828 a2=70 a3=2 items=0 ppid=4381 pid=4816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.141000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 9 09:47:34.152000 audit: BPF prog-id=180 op=UNLOAD Feb 9 09:47:34.246000 audit[4819]: NETFILTER_CFG table=filter:105 family=2 entries=11 op=nft_register_rule pid=4819 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:34.246000 audit[4819]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffd051b9d0 a2=0 a3=ffff8658e6c0 items=0 ppid=3176 pid=4819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.246000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:34.252000 audit[4819]: NETFILTER_CFG table=nat:106 family=2 entries=35 op=nft_register_chain pid=4819 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:34.252000 audit[4819]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13788 a0=3 a1=ffffd051b9d0 a2=0 a3=ffff8658e6c0 items=0 ppid=3176 pid=4819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.252000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:34.340661 (udev-worker)[4804]: Network interface NamePolicy= disabled on kernel command line. Feb 9 09:47:34.342325 systemd-networkd[1537]: calife1a486ed3a: Link UP Feb 9 09:47:34.351821 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calife1a486ed3a: link becomes ready Feb 9 09:47:34.351291 systemd-networkd[1537]: calife1a486ed3a: Gained carrier Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:33.981 [INFO][4773] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0 csi-node-driver- calico-system bc0b6437-68a5-497b-8560-3205bb08c4b9 794 0 2024-02-09 09:47:01 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:676488fcc9 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ip-172-31-17-0 csi-node-driver-xk7qk eth0 default [] [] [kns.calico-system ksa.calico-system.default] calife1a486ed3a [] []}} ContainerID="f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" Namespace="calico-system" Pod="csi-node-driver-xk7qk" WorkloadEndpoint="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-" Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:33.982 [INFO][4773] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" Namespace="calico-system" Pod="csi-node-driver-xk7qk" WorkloadEndpoint="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.127 [INFO][4796] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" HandleID="k8s-pod-network.f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" Workload="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.224 [INFO][4796] ipam_plugin.go 268: Auto assigning IP ContainerID="f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" HandleID="k8s-pod-network.f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" Workload="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d5970), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-17-0", "pod":"csi-node-driver-xk7qk", "timestamp":"2024-02-09 09:47:34.127716998 +0000 UTC"}, Hostname:"ip-172-31-17-0", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.224 [INFO][4796] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.225 [INFO][4796] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.225 [INFO][4796] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-0' Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.235 [INFO][4796] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" host="ip-172-31-17-0" Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.243 [INFO][4796] ipam.go 372: Looking up existing affinities for host host="ip-172-31-17-0" Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.277 [INFO][4796] ipam.go 489: Trying affinity for 192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.284 [INFO][4796] ipam.go 155: Attempting to load block cidr=192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.294 [INFO][4796] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.295 [INFO][4796] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.83.0/26 handle="k8s-pod-network.f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" host="ip-172-31-17-0" Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.299 [INFO][4796] ipam.go 1682: Creating new handle: k8s-pod-network.f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.308 [INFO][4796] ipam.go 1203: Writing block in order to claim IPs block=192.168.83.0/26 handle="k8s-pod-network.f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" host="ip-172-31-17-0" Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.333 [INFO][4796] ipam.go 1216: Successfully claimed IPs: [192.168.83.3/26] block=192.168.83.0/26 handle="k8s-pod-network.f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" host="ip-172-31-17-0" Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.333 [INFO][4796] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.83.3/26] handle="k8s-pod-network.f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" host="ip-172-31-17-0" Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.333 [INFO][4796] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:34.383629 env[1730]: 2024-02-09 09:47:34.333 [INFO][4796] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.83.3/26] IPv6=[] ContainerID="f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" HandleID="k8s-pod-network.f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" Workload="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:34.385180 env[1730]: 2024-02-09 09:47:34.336 [INFO][4773] k8s.go 385: Populated endpoint ContainerID="f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" Namespace="calico-system" Pod="csi-node-driver-xk7qk" WorkloadEndpoint="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"bc0b6437-68a5-497b-8560-3205bb08c4b9", ResourceVersion:"794", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 47, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"", Pod:"csi-node-driver-xk7qk", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.83.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calife1a486ed3a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:34.385180 env[1730]: 2024-02-09 09:47:34.337 [INFO][4773] k8s.go 386: Calico CNI using IPs: [192.168.83.3/32] ContainerID="f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" Namespace="calico-system" Pod="csi-node-driver-xk7qk" WorkloadEndpoint="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:34.385180 env[1730]: 2024-02-09 09:47:34.337 [INFO][4773] dataplane_linux.go 68: Setting the host side veth name to calife1a486ed3a ContainerID="f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" Namespace="calico-system" Pod="csi-node-driver-xk7qk" WorkloadEndpoint="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:34.385180 env[1730]: 2024-02-09 09:47:34.354 [INFO][4773] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" Namespace="calico-system" Pod="csi-node-driver-xk7qk" WorkloadEndpoint="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:34.385180 env[1730]: 2024-02-09 09:47:34.355 [INFO][4773] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" Namespace="calico-system" Pod="csi-node-driver-xk7qk" WorkloadEndpoint="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"bc0b6437-68a5-497b-8560-3205bb08c4b9", ResourceVersion:"794", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 47, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae", Pod:"csi-node-driver-xk7qk", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.83.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calife1a486ed3a", MAC:"ae:fe:12:e1:fe:e4", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:34.385180 env[1730]: 2024-02-09 09:47:34.379 [INFO][4773] k8s.go 491: Wrote updated endpoint to datastore ContainerID="f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae" Namespace="calico-system" Pod="csi-node-driver-xk7qk" WorkloadEndpoint="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:34.391716 env[1730]: time="2024-02-09T09:47:34.391630578Z" level=info msg="StopPodSandbox for \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\"" Feb 9 09:47:34.464642 env[1730]: time="2024-02-09T09:47:34.464523504Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:47:34.464996 env[1730]: time="2024-02-09T09:47:34.464930456Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:47:34.468906 env[1730]: time="2024-02-09T09:47:34.468827859Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:47:34.469472 env[1730]: time="2024-02-09T09:47:34.469397726Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae pid=4859 runtime=io.containerd.runc.v2 Feb 9 09:47:34.488205 sshd[4770]: pam_unix(sshd:session): session closed for user core Feb 9 09:47:34.489000 audit[4770]: USER_END pid=4770 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:34.489000 audit[4770]: CRED_DISP pid=4770 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:34.494452 systemd[1]: sshd@7-172.31.17.0:22-139.178.89.65:33880.service: Deactivated successfully. Feb 9 09:47:34.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.17.0:22-139.178.89.65:33880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:34.496365 systemd[1]: session-8.scope: Deactivated successfully. Feb 9 09:47:34.497757 systemd-logind[1716]: Session 8 logged out. Waiting for processes to exit. Feb 9 09:47:34.508050 systemd-logind[1716]: Removed session 8. Feb 9 09:47:34.552943 systemd[1]: Started cri-containerd-f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae.scope. Feb 9 09:47:34.616952 systemd-networkd[1537]: cali542605f9b47: Gained IPv6LL Feb 9 09:47:34.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.696308 kernel: kauditd_printk_skb: 311 callbacks suppressed Feb 9 09:47:34.696444 kernel: audit: type=1400 audit(1707472054.692:1323): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.720668 kernel: audit: type=1400 audit(1707472054.692:1324): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.742091 kernel: audit: type=1400 audit(1707472054.692:1325): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.746729 kernel: audit: type=1400 audit(1707472054.692:1326): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.762080 kernel: audit: type=1400 audit(1707472054.692:1327): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.772372 kernel: audit: type=1400 audit(1707472054.692:1328): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.781789 kernel: audit: type=1400 audit(1707472054.692:1329): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.815230 kernel: audit: type=1400 audit(1707472054.692:1330): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.815457 kernel: audit: type=1400 audit(1707472054.692:1331): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.815508 kernel: audit: type=1400 audit(1707472054.692:1332): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.821932 env[1730]: 2024-02-09 09:47:34.608 [INFO][4856] k8s.go 578: Cleaning up netns ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:34.821932 env[1730]: 2024-02-09 09:47:34.608 [INFO][4856] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" iface="eth0" netns="/var/run/netns/cni-e29c6ab5-e884-c207-5382-bdae159549b1" Feb 9 09:47:34.821932 env[1730]: 2024-02-09 09:47:34.609 [INFO][4856] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" iface="eth0" netns="/var/run/netns/cni-e29c6ab5-e884-c207-5382-bdae159549b1" Feb 9 09:47:34.821932 env[1730]: 2024-02-09 09:47:34.609 [INFO][4856] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" iface="eth0" netns="/var/run/netns/cni-e29c6ab5-e884-c207-5382-bdae159549b1" Feb 9 09:47:34.821932 env[1730]: 2024-02-09 09:47:34.609 [INFO][4856] k8s.go 585: Releasing IP address(es) ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:34.821932 env[1730]: 2024-02-09 09:47:34.610 [INFO][4856] utils.go 188: Calico CNI releasing IP address ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:34.821932 env[1730]: 2024-02-09 09:47:34.744 [INFO][4892] ipam_plugin.go 415: Releasing address using handleID ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" HandleID="k8s-pod-network.b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:34.821932 env[1730]: 2024-02-09 09:47:34.744 [INFO][4892] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:34.821932 env[1730]: 2024-02-09 09:47:34.745 [INFO][4892] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:34.821932 env[1730]: 2024-02-09 09:47:34.773 [WARNING][4892] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" HandleID="k8s-pod-network.b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:34.821932 env[1730]: 2024-02-09 09:47:34.773 [INFO][4892] ipam_plugin.go 443: Releasing address using workloadID ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" HandleID="k8s-pod-network.b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:34.821932 env[1730]: 2024-02-09 09:47:34.783 [INFO][4892] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:34.821932 env[1730]: 2024-02-09 09:47:34.815 [INFO][4856] k8s.go 591: Teardown processing complete. ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:34.692000 audit: BPF prog-id=181 op=LOAD Feb 9 09:47:34.692000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[4873]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4859 pid=4873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637353664336538663932613463616431666139616132383536336637 Feb 9 09:47:34.692000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[4873]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4859 pid=4873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637353664336538663932613463616431666139616132383536336637 Feb 9 09:47:34.692000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.692000 audit: BPF prog-id=182 op=LOAD Feb 9 09:47:34.692000 audit[4873]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4859 pid=4873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637353664336538663932613463616431666139616132383536336637 Feb 9 09:47:34.694000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.694000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.694000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.694000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.694000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.694000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.694000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.694000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.694000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.694000 audit: BPF prog-id=183 op=LOAD Feb 9 09:47:34.694000 audit[4873]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4859 pid=4873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637353664336538663932613463616431666139616132383536336637 Feb 9 09:47:34.728000 audit: BPF prog-id=183 op=UNLOAD Feb 9 09:47:34.728000 audit: BPF prog-id=182 op=UNLOAD Feb 9 09:47:34.730000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.730000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.730000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.730000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.730000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.730000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.730000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.730000 audit[4873]: AVC avc: denied { perfmon } for pid=4873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.730000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.730000 audit[4873]: AVC avc: denied { bpf } for pid=4873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:34.730000 audit: BPF prog-id=184 op=LOAD Feb 9 09:47:34.730000 audit[4873]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4859 pid=4873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637353664336538663932613463616431666139616132383536336637 Feb 9 09:47:34.833166 systemd[1]: run-netns-cni\x2de29c6ab5\x2de884\x2dc207\x2d5382\x2dbdae159549b1.mount: Deactivated successfully. Feb 9 09:47:34.841825 env[1730]: time="2024-02-09T09:47:34.839287789Z" level=info msg="TearDown network for sandbox \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\" successfully" Feb 9 09:47:34.841825 env[1730]: time="2024-02-09T09:47:34.839383165Z" level=info msg="StopPodSandbox for \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\" returns successfully" Feb 9 09:47:34.844731 env[1730]: time="2024-02-09T09:47:34.843799189Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-nvh8j,Uid:223a7223-a6dc-49ad-9622-bb87111cb4bb,Namespace:kube-system,Attempt:1,}" Feb 9 09:47:34.853000 audit[4915]: NETFILTER_CFG table=raw:107 family=2 entries=19 op=nft_register_chain pid=4915 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 09:47:34.853000 audit[4915]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6132 a0=3 a1=ffffdc7e9530 a2=0 a3=ffffaf07efa8 items=0 ppid=4381 pid=4915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.853000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 09:47:34.860000 audit[4917]: NETFILTER_CFG table=mangle:108 family=2 entries=19 op=nft_register_chain pid=4917 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 09:47:34.860000 audit[4917]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6800 a0=3 a1=fffffd3b3880 a2=0 a3=ffffa869dfa8 items=0 ppid=4381 pid=4917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.860000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 09:47:34.899316 env[1730]: time="2024-02-09T09:47:34.899262360Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-xk7qk,Uid:bc0b6437-68a5-497b-8560-3205bb08c4b9,Namespace:calico-system,Attempt:1,} returns sandbox id \"f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae\"" Feb 9 09:47:34.905000 audit[4916]: NETFILTER_CFG table=nat:109 family=2 entries=16 op=nft_register_chain pid=4916 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 09:47:34.905000 audit[4916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5188 a0=3 a1=ffffd71b1ca0 a2=0 a3=ffffb7f52fa8 items=0 ppid=4381 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.905000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 09:47:34.939000 audit[4940]: NETFILTER_CFG table=filter:110 family=2 entries=71 op=nft_register_chain pid=4940 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 09:47:34.939000 audit[4940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=36636 a0=3 a1=ffffc985e8b0 a2=0 a3=ffffb5042fa8 items=0 ppid=4381 pid=4940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:34.939000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 09:47:35.068000 audit[4954]: NETFILTER_CFG table=filter:111 family=2 entries=72 op=nft_register_chain pid=4954 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 09:47:35.068000 audit[4954]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=39336 a0=3 a1=ffffc618a970 a2=0 a3=ffffb90e3fa8 items=0 ppid=4381 pid=4954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:35.068000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 09:47:35.157742 systemd-networkd[1537]: cali16296b0b863: Link UP Feb 9 09:47:35.164995 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 09:47:35.165154 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali16296b0b863: link becomes ready Feb 9 09:47:35.165396 systemd-networkd[1537]: cali16296b0b863: Gained carrier Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:34.978 [INFO][4930] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0 coredns-5dd5756b68- kube-system 223a7223-a6dc-49ad-9622-bb87111cb4bb 838 0 2024-02-09 09:46:53 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-17-0 coredns-5dd5756b68-nvh8j eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali16296b0b863 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" Namespace="kube-system" Pod="coredns-5dd5756b68-nvh8j" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-" Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:34.978 [INFO][4930] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" Namespace="kube-system" Pod="coredns-5dd5756b68-nvh8j" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.072 [INFO][4945] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" HandleID="k8s-pod-network.2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.093 [INFO][4945] ipam_plugin.go 268: Auto assigning IP ContainerID="2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" HandleID="k8s-pod-network.2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002bc7c0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-17-0", "pod":"coredns-5dd5756b68-nvh8j", "timestamp":"2024-02-09 09:47:35.072727733 +0000 UTC"}, Hostname:"ip-172-31-17-0", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.094 [INFO][4945] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.094 [INFO][4945] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.094 [INFO][4945] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-0' Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.097 [INFO][4945] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" host="ip-172-31-17-0" Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.106 [INFO][4945] ipam.go 372: Looking up existing affinities for host host="ip-172-31-17-0" Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.115 [INFO][4945] ipam.go 489: Trying affinity for 192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.119 [INFO][4945] ipam.go 155: Attempting to load block cidr=192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.125 [INFO][4945] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.125 [INFO][4945] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.83.0/26 handle="k8s-pod-network.2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" host="ip-172-31-17-0" Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.132 [INFO][4945] ipam.go 1682: Creating new handle: k8s-pod-network.2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991 Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.138 [INFO][4945] ipam.go 1203: Writing block in order to claim IPs block=192.168.83.0/26 handle="k8s-pod-network.2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" host="ip-172-31-17-0" Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.146 [INFO][4945] ipam.go 1216: Successfully claimed IPs: [192.168.83.4/26] block=192.168.83.0/26 handle="k8s-pod-network.2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" host="ip-172-31-17-0" Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.147 [INFO][4945] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.83.4/26] handle="k8s-pod-network.2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" host="ip-172-31-17-0" Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.147 [INFO][4945] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:35.199338 env[1730]: 2024-02-09 09:47:35.147 [INFO][4945] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.83.4/26] IPv6=[] ContainerID="2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" HandleID="k8s-pod-network.2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:35.200657 env[1730]: 2024-02-09 09:47:35.151 [INFO][4930] k8s.go 385: Populated endpoint ContainerID="2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" Namespace="kube-system" Pod="coredns-5dd5756b68-nvh8j" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"223a7223-a6dc-49ad-9622-bb87111cb4bb", ResourceVersion:"838", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 46, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"", Pod:"coredns-5dd5756b68-nvh8j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali16296b0b863", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:35.200657 env[1730]: 2024-02-09 09:47:35.151 [INFO][4930] k8s.go 386: Calico CNI using IPs: [192.168.83.4/32] ContainerID="2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" Namespace="kube-system" Pod="coredns-5dd5756b68-nvh8j" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:35.200657 env[1730]: 2024-02-09 09:47:35.151 [INFO][4930] dataplane_linux.go 68: Setting the host side veth name to cali16296b0b863 ContainerID="2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" Namespace="kube-system" Pod="coredns-5dd5756b68-nvh8j" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:35.200657 env[1730]: 2024-02-09 09:47:35.168 [INFO][4930] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" Namespace="kube-system" Pod="coredns-5dd5756b68-nvh8j" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:35.200657 env[1730]: 2024-02-09 09:47:35.169 [INFO][4930] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" Namespace="kube-system" Pod="coredns-5dd5756b68-nvh8j" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"223a7223-a6dc-49ad-9622-bb87111cb4bb", ResourceVersion:"838", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 46, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991", Pod:"coredns-5dd5756b68-nvh8j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali16296b0b863", MAC:"ee:7f:6a:e9:2a:2d", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:35.200657 env[1730]: 2024-02-09 09:47:35.195 [INFO][4930] k8s.go 491: Wrote updated endpoint to datastore ContainerID="2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991" Namespace="kube-system" Pod="coredns-5dd5756b68-nvh8j" WorkloadEndpoint="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:35.231692 env[1730]: time="2024-02-09T09:47:35.231529035Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:47:35.231999 env[1730]: time="2024-02-09T09:47:35.231919660Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:47:35.232200 env[1730]: time="2024-02-09T09:47:35.232137289Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:47:35.233017 env[1730]: time="2024-02-09T09:47:35.232919055Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991 pid=4975 runtime=io.containerd.runc.v2 Feb 9 09:47:35.260000 audit[4992]: NETFILTER_CFG table=filter:112 family=2 entries=34 op=nft_register_chain pid=4992 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 09:47:35.260000 audit[4992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=17884 a0=3 a1=ffffeb78ee30 a2=0 a3=ffffb636efa8 items=0 ppid=4381 pid=4992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:35.260000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 09:47:35.289037 systemd[1]: Started cri-containerd-2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991.scope. Feb 9 09:47:35.320918 systemd-networkd[1537]: vxlan.calico: Gained IPv6LL Feb 9 09:47:35.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.346000 audit: BPF prog-id=185 op=LOAD Feb 9 09:47:35.347000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.347000 audit[4987]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4975 pid=4987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:35.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230333435313464656537623038636136643731346563666430646231 Feb 9 09:47:35.347000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.347000 audit[4987]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4975 pid=4987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:35.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230333435313464656537623038636136643731346563666430646231 Feb 9 09:47:35.347000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.347000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.347000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.347000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.347000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.347000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.347000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.347000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.347000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.347000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.347000 audit: BPF prog-id=186 op=LOAD Feb 9 09:47:35.347000 audit[4987]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4975 pid=4987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:35.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230333435313464656537623038636136643731346563666430646231 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit: BPF prog-id=187 op=LOAD Feb 9 09:47:35.348000 audit[4987]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4975 pid=4987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:35.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230333435313464656537623038636136643731346563666430646231 Feb 9 09:47:35.348000 audit: BPF prog-id=187 op=UNLOAD Feb 9 09:47:35.348000 audit: BPF prog-id=186 op=UNLOAD Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.348000 audit: BPF prog-id=188 op=LOAD Feb 9 09:47:35.348000 audit[4987]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4975 pid=4987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:35.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230333435313464656537623038636136643731346563666430646231 Feb 9 09:47:35.409552 env[1730]: time="2024-02-09T09:47:35.407600349Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-nvh8j,Uid:223a7223-a6dc-49ad-9622-bb87111cb4bb,Namespace:kube-system,Attempt:1,} returns sandbox id \"2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991\"" Feb 9 09:47:35.415866 env[1730]: time="2024-02-09T09:47:35.415810294Z" level=info msg="CreateContainer within sandbox \"2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 9 09:47:35.453648 env[1730]: time="2024-02-09T09:47:35.453565089Z" level=info msg="CreateContainer within sandbox \"2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"d47551434d6fd471c2ffa83f05ed9dbd3f509621008cc20c8ac7f928c477365f\"" Feb 9 09:47:35.454945 env[1730]: time="2024-02-09T09:47:35.454893604Z" level=info msg="StartContainer for \"d47551434d6fd471c2ffa83f05ed9dbd3f509621008cc20c8ac7f928c477365f\"" Feb 9 09:47:35.488769 systemd[1]: Started cri-containerd-d47551434d6fd471c2ffa83f05ed9dbd3f509621008cc20c8ac7f928c477365f.scope. Feb 9 09:47:35.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.548000 audit: BPF prog-id=189 op=LOAD Feb 9 09:47:35.550000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.550000 audit[5017]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4975 pid=5017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:35.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434373535313433346436666434373163326666613833663035656439 Feb 9 09:47:35.550000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.550000 audit[5017]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4975 pid=5017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:35.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434373535313433346436666434373163326666613833663035656439 Feb 9 09:47:35.551000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.551000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.551000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.551000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.551000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.551000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.551000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.551000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.551000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.551000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.551000 audit: BPF prog-id=190 op=LOAD Feb 9 09:47:35.551000 audit[5017]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4975 pid=5017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:35.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434373535313433346436666434373163326666613833663035656439 Feb 9 09:47:35.552000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.552000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.552000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.552000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.552000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.552000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.552000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.552000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.552000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.552000 audit: BPF prog-id=191 op=LOAD Feb 9 09:47:35.552000 audit[5017]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4975 pid=5017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:35.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434373535313433346436666434373163326666613833663035656439 Feb 9 09:47:35.553000 audit: BPF prog-id=191 op=UNLOAD Feb 9 09:47:35.554000 audit: BPF prog-id=190 op=UNLOAD Feb 9 09:47:35.555000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.555000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.555000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.555000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.555000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.555000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.555000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.555000 audit[5017]: AVC avc: denied { perfmon } for pid=5017 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.555000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.555000 audit[5017]: AVC avc: denied { bpf } for pid=5017 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:35.555000 audit: BPF prog-id=192 op=LOAD Feb 9 09:47:35.555000 audit[5017]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4975 pid=5017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:35.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434373535313433346436666434373163326666613833663035656439 Feb 9 09:47:35.594000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:35.600921 env[1730]: time="2024-02-09T09:47:35.600857757Z" level=info msg="StartContainer for \"d47551434d6fd471c2ffa83f05ed9dbd3f509621008cc20c8ac7f928c477365f\" returns successfully" Feb 9 09:47:35.594000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002b41000 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:47:35.594000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:47:35.607000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:35.607000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002aecbd0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:47:35.607000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:47:35.908693 kubelet[2782]: I0209 09:47:35.908543 2782 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-nvh8j" podStartSLOduration=42.908489701 podCreationTimestamp="2024-02-09 09:46:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 09:47:35.908462512 +0000 UTC m=+55.265115860" watchObservedRunningTime="2024-02-09 09:47:35.908489701 +0000 UTC m=+55.265143085" Feb 9 09:47:36.052000 audit[5047]: NETFILTER_CFG table=filter:113 family=2 entries=8 op=nft_register_rule pid=5047 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:36.052000 audit[5047]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=fffff6cb2010 a2=0 a3=ffff9aad06c0 items=0 ppid=3176 pid=5047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:36.052000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:36.059000 audit[5047]: NETFILTER_CFG table=nat:114 family=2 entries=44 op=nft_register_rule pid=5047 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:36.059000 audit[5047]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13788 a0=3 a1=fffff6cb2010 a2=0 a3=ffff9aad06c0 items=0 ppid=3176 pid=5047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:36.059000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:36.091000 audit[5049]: NETFILTER_CFG table=filter:115 family=2 entries=8 op=nft_register_rule pid=5049 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:36.091000 audit[5049]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffdd56fc40 a2=0 a3=ffff866bb6c0 items=0 ppid=3176 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:36.091000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:36.108000 audit[5049]: NETFILTER_CFG table=nat:116 family=2 entries=56 op=nft_register_chain pid=5049 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:47:36.108000 audit[5049]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19452 a0=3 a1=ffffdd56fc40 a2=0 a3=ffff866bb6c0 items=0 ppid=3176 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:36.108000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:47:36.152951 systemd-networkd[1537]: calife1a486ed3a: Gained IPv6LL Feb 9 09:47:36.793000 systemd-networkd[1537]: cali16296b0b863: Gained IPv6LL Feb 9 09:47:36.919000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:36.919000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=400ea4ac00 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:47:36.919000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:47:36.921000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:36.921000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=400ea4ae10 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:47:36.921000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:47:36.927000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:36.927000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=400deb2d20 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:47:36.927000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:47:36.949000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:36.949000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=4008573120 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:47:36.949000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:47:36.949000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:36.949000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=400b158960 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:47:36.949000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:47:36.950000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:36.950000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=4008573180 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:47:36.950000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:47:37.656709 env[1730]: time="2024-02-09T09:47:37.656640418Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:37.662164 env[1730]: time="2024-02-09T09:47:37.662112471Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:094645649618376e48b5ec13a94a164d53dbdf819b7ab644f080b751f24560c8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:37.667127 env[1730]: time="2024-02-09T09:47:37.667069756Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:37.671913 env[1730]: time="2024-02-09T09:47:37.671852688Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:e264ab1fb2f1ae90dd1d84e226d11d2eb4350e74ac27de4c65f29f5aadba5bb1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:37.673594 env[1730]: time="2024-02-09T09:47:37.673527646Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\" returns image reference \"sha256:094645649618376e48b5ec13a94a164d53dbdf819b7ab644f080b751f24560c8\"" Feb 9 09:47:37.676741 env[1730]: time="2024-02-09T09:47:37.676666697Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\"" Feb 9 09:47:37.706259 env[1730]: time="2024-02-09T09:47:37.706201294Z" level=info msg="CreateContainer within sandbox \"7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Feb 9 09:47:37.735028 env[1730]: time="2024-02-09T09:47:37.734916093Z" level=info msg="CreateContainer within sandbox \"7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"e8408174a709b277a22f479e57d46663c07ccde318d9d8063697d4809712d0d6\"" Feb 9 09:47:37.736230 env[1730]: time="2024-02-09T09:47:37.736178787Z" level=info msg="StartContainer for \"e8408174a709b277a22f479e57d46663c07ccde318d9d8063697d4809712d0d6\"" Feb 9 09:47:37.815774 systemd[1]: Started cri-containerd-e8408174a709b277a22f479e57d46663c07ccde318d9d8063697d4809712d0d6.scope. Feb 9 09:47:37.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.857000 audit: BPF prog-id=193 op=LOAD Feb 9 09:47:37.858000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.858000 audit[5063]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4694 pid=5063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:37.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538343038313734613730396232373761323266343739653537643436 Feb 9 09:47:37.858000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.858000 audit[5063]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4694 pid=5063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:37.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538343038313734613730396232373761323266343739653537643436 Feb 9 09:47:37.859000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.859000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.859000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.859000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.859000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.859000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.859000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.859000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.859000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.859000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.859000 audit: BPF prog-id=194 op=LOAD Feb 9 09:47:37.859000 audit[5063]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4694 pid=5063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:37.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538343038313734613730396232373761323266343739653537643436 Feb 9 09:47:37.860000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.860000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.860000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.860000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.860000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.860000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.860000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.860000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.860000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.860000 audit: BPF prog-id=195 op=LOAD Feb 9 09:47:37.860000 audit[5063]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4694 pid=5063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:37.860000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538343038313734613730396232373761323266343739653537643436 Feb 9 09:47:37.861000 audit: BPF prog-id=195 op=UNLOAD Feb 9 09:47:37.862000 audit: BPF prog-id=194 op=UNLOAD Feb 9 09:47:37.862000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.862000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.862000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.862000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.862000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.862000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.862000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.862000 audit[5063]: AVC avc: denied { perfmon } for pid=5063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.862000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.862000 audit[5063]: AVC avc: denied { bpf } for pid=5063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:37.862000 audit: BPF prog-id=196 op=LOAD Feb 9 09:47:37.862000 audit[5063]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4694 pid=5063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:37.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538343038313734613730396232373761323266343739653537643436 Feb 9 09:47:37.968951 env[1730]: time="2024-02-09T09:47:37.968815592Z" level=info msg="StartContainer for \"e8408174a709b277a22f479e57d46663c07ccde318d9d8063697d4809712d0d6\" returns successfully" Feb 9 09:47:38.895338 kubelet[2782]: I0209 09:47:38.892934 2782 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Feb 9 09:47:38.916556 kubelet[2782]: I0209 09:47:38.916478 2782 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-66758d5cbb-p8v5t" podStartSLOduration=32.125811556 podCreationTimestamp="2024-02-09 09:47:03 +0000 UTC" firstStartedPulling="2024-02-09 09:47:33.884784323 +0000 UTC m=+53.241437659" lastFinishedPulling="2024-02-09 09:47:37.675374486 +0000 UTC m=+57.032027846" observedRunningTime="2024-02-09 09:47:38.916049879 +0000 UTC m=+58.272703215" watchObservedRunningTime="2024-02-09 09:47:38.916401743 +0000 UTC m=+58.273055103" Feb 9 09:47:39.396480 systemd[1]: run-containerd-runc-k8s.io-38d808b7dbec68999caf5fd806b8883f3700c223536482e50227ae1ae3f949fb-runc.rGmpwC.mount: Deactivated successfully. Feb 9 09:47:39.513554 systemd[1]: Started sshd@8-172.31.17.0:22-139.178.89.65:57928.service. Feb 9 09:47:39.512000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.17.0:22-139.178.89.65:57928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:39.706000 audit[5150]: USER_ACCT pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:39.708902 sshd[5150]: Accepted publickey for core from 139.178.89.65 port 57928 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:47:39.711064 kernel: kauditd_printk_skb: 273 callbacks suppressed Feb 9 09:47:39.711195 kernel: audit: type=1101 audit(1707472059.706:1414): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:39.715558 sshd[5150]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:47:39.709000 audit[5150]: CRED_ACQ pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:39.731925 kernel: audit: type=1103 audit(1707472059.709:1415): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:39.741007 kernel: audit: type=1006 audit(1707472059.709:1416): pid=5150 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Feb 9 09:47:39.709000 audit[5150]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1a3c210 a2=3 a3=1 items=0 ppid=1 pid=5150 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:39.752121 kernel: audit: type=1300 audit(1707472059.709:1416): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1a3c210 a2=3 a3=1 items=0 ppid=1 pid=5150 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:39.756068 systemd-logind[1716]: New session 9 of user core. Feb 9 09:47:39.760028 systemd[1]: Started session-9.scope. Feb 9 09:47:39.709000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:47:39.766590 kernel: audit: type=1327 audit(1707472059.709:1416): proctitle=737368643A20636F7265205B707269765D Feb 9 09:47:39.774000 audit[5150]: USER_START pid=5150 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:39.788000 audit[5156]: CRED_ACQ pid=5156 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:39.799448 kernel: audit: type=1105 audit(1707472059.774:1417): pid=5150 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:39.799609 kernel: audit: type=1103 audit(1707472059.788:1418): pid=5156 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:40.086516 sshd[5150]: pam_unix(sshd:session): session closed for user core Feb 9 09:47:40.088000 audit[5150]: USER_END pid=5150 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:40.102116 systemd[1]: sshd@8-172.31.17.0:22-139.178.89.65:57928.service: Deactivated successfully. Feb 9 09:47:40.103499 systemd[1]: session-9.scope: Deactivated successfully. Feb 9 09:47:40.105657 systemd-logind[1716]: Session 9 logged out. Waiting for processes to exit. Feb 9 09:47:40.107269 systemd-logind[1716]: Removed session 9. Feb 9 09:47:40.088000 audit[5150]: CRED_DISP pid=5150 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:40.122058 kernel: audit: type=1106 audit(1707472060.088:1419): pid=5150 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:40.122229 kernel: audit: type=1104 audit(1707472060.088:1420): pid=5150 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:40.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.17.0:22-139.178.89.65:57928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:40.134440 kernel: audit: type=1131 audit(1707472060.100:1421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.17.0:22-139.178.89.65:57928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:40.346782 env[1730]: time="2024-02-09T09:47:40.346608836Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:40.350114 env[1730]: time="2024-02-09T09:47:40.350045813Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4b71e7439e0eba34a97844591560a009f37e8e6c17a386a34d416c1cc872dee8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:40.352795 env[1730]: time="2024-02-09T09:47:40.352729320Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:40.355742 env[1730]: time="2024-02-09T09:47:40.355609752Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\" returns image reference \"sha256:4b71e7439e0eba34a97844591560a009f37e8e6c17a386a34d416c1cc872dee8\"" Feb 9 09:47:40.355930 env[1730]: time="2024-02-09T09:47:40.355830196Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:2b9021393c17e87ba8a3c89f5b3719941812f4e4751caa0b71eb2233bff48738,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:40.360322 env[1730]: time="2024-02-09T09:47:40.360239085Z" level=info msg="CreateContainer within sandbox \"f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Feb 9 09:47:40.388209 env[1730]: time="2024-02-09T09:47:40.388121942Z" level=info msg="CreateContainer within sandbox \"f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"09552eca9dfef541cdadd218f26615b4e5c589b32722dc76a81db3fe093611e4\"" Feb 9 09:47:40.389466 env[1730]: time="2024-02-09T09:47:40.389403173Z" level=info msg="StartContainer for \"09552eca9dfef541cdadd218f26615b4e5c589b32722dc76a81db3fe093611e4\"" Feb 9 09:47:40.435327 systemd[1]: Started cri-containerd-09552eca9dfef541cdadd218f26615b4e5c589b32722dc76a81db3fe093611e4.scope. Feb 9 09:47:40.455318 systemd[1]: run-containerd-runc-k8s.io-09552eca9dfef541cdadd218f26615b4e5c589b32722dc76a81db3fe093611e4-runc.EfnZGE.mount: Deactivated successfully. Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4859 pid=5181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:40.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039353532656361396466656635343163646164643231386632363631 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit: BPF prog-id=197 op=LOAD Feb 9 09:47:40.512000 audit[5181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4859 pid=5181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:40.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039353532656361396466656635343163646164643231386632363631 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.512000 audit: BPF prog-id=198 op=LOAD Feb 9 09:47:40.512000 audit[5181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4859 pid=5181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:40.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039353532656361396466656635343163646164643231386632363631 Feb 9 09:47:40.512000 audit: BPF prog-id=198 op=UNLOAD Feb 9 09:47:40.513000 audit: BPF prog-id=197 op=UNLOAD Feb 9 09:47:40.513000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.513000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.513000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.513000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.513000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.513000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.513000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.513000 audit[5181]: AVC avc: denied { perfmon } for pid=5181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.513000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.513000 audit[5181]: AVC avc: denied { bpf } for pid=5181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:40.513000 audit: BPF prog-id=199 op=LOAD Feb 9 09:47:40.513000 audit[5181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4859 pid=5181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:40.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039353532656361396466656635343163646164643231386632363631 Feb 9 09:47:40.558758 env[1730]: time="2024-02-09T09:47:40.558645757Z" level=info msg="StartContainer for \"09552eca9dfef541cdadd218f26615b4e5c589b32722dc76a81db3fe093611e4\" returns successfully" Feb 9 09:47:40.560870 env[1730]: time="2024-02-09T09:47:40.560805787Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\"" Feb 9 09:47:41.169283 env[1730]: time="2024-02-09T09:47:41.168627663Z" level=info msg="StopPodSandbox for \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\"" Feb 9 09:47:41.297066 env[1730]: 2024-02-09 09:47:41.231 [WARNING][5221] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0", GenerateName:"calico-kube-controllers-66758d5cbb-", Namespace:"calico-system", SelfLink:"", UID:"223b50ac-948a-4d46-a937-8e0470eff72c", ResourceVersion:"887", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 47, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"66758d5cbb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2", Pod:"calico-kube-controllers-66758d5cbb-p8v5t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.83.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali542605f9b47", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:41.297066 env[1730]: 2024-02-09 09:47:41.231 [INFO][5221] k8s.go 578: Cleaning up netns ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:41.297066 env[1730]: 2024-02-09 09:47:41.231 [INFO][5221] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" iface="eth0" netns="" Feb 9 09:47:41.297066 env[1730]: 2024-02-09 09:47:41.231 [INFO][5221] k8s.go 585: Releasing IP address(es) ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:41.297066 env[1730]: 2024-02-09 09:47:41.231 [INFO][5221] utils.go 188: Calico CNI releasing IP address ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:41.297066 env[1730]: 2024-02-09 09:47:41.275 [INFO][5228] ipam_plugin.go 415: Releasing address using handleID ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" HandleID="k8s-pod-network.bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Workload="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:41.297066 env[1730]: 2024-02-09 09:47:41.275 [INFO][5228] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:41.297066 env[1730]: 2024-02-09 09:47:41.275 [INFO][5228] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:41.297066 env[1730]: 2024-02-09 09:47:41.289 [WARNING][5228] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" HandleID="k8s-pod-network.bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Workload="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:41.297066 env[1730]: 2024-02-09 09:47:41.290 [INFO][5228] ipam_plugin.go 443: Releasing address using workloadID ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" HandleID="k8s-pod-network.bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Workload="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:41.297066 env[1730]: 2024-02-09 09:47:41.292 [INFO][5228] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:41.297066 env[1730]: 2024-02-09 09:47:41.294 [INFO][5221] k8s.go 591: Teardown processing complete. ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:41.298094 env[1730]: time="2024-02-09T09:47:41.297128822Z" level=info msg="TearDown network for sandbox \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\" successfully" Feb 9 09:47:41.298094 env[1730]: time="2024-02-09T09:47:41.297178738Z" level=info msg="StopPodSandbox for \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\" returns successfully" Feb 9 09:47:41.298598 env[1730]: time="2024-02-09T09:47:41.298543873Z" level=info msg="RemovePodSandbox for \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\"" Feb 9 09:47:41.298869 env[1730]: time="2024-02-09T09:47:41.298805246Z" level=info msg="Forcibly stopping sandbox \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\"" Feb 9 09:47:41.448628 env[1730]: 2024-02-09 09:47:41.366 [WARNING][5246] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0", GenerateName:"calico-kube-controllers-66758d5cbb-", Namespace:"calico-system", SelfLink:"", UID:"223b50ac-948a-4d46-a937-8e0470eff72c", ResourceVersion:"887", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 47, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"66758d5cbb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"7fcf7ee49398fc1ab11153d6033dff975031cd110db0a35004f7f80a488f8bb2", Pod:"calico-kube-controllers-66758d5cbb-p8v5t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.83.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali542605f9b47", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:41.448628 env[1730]: 2024-02-09 09:47:41.367 [INFO][5246] k8s.go 578: Cleaning up netns ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:41.448628 env[1730]: 2024-02-09 09:47:41.367 [INFO][5246] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" iface="eth0" netns="" Feb 9 09:47:41.448628 env[1730]: 2024-02-09 09:47:41.367 [INFO][5246] k8s.go 585: Releasing IP address(es) ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:41.448628 env[1730]: 2024-02-09 09:47:41.367 [INFO][5246] utils.go 188: Calico CNI releasing IP address ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:41.448628 env[1730]: 2024-02-09 09:47:41.414 [INFO][5252] ipam_plugin.go 415: Releasing address using handleID ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" HandleID="k8s-pod-network.bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Workload="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:41.448628 env[1730]: 2024-02-09 09:47:41.414 [INFO][5252] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:41.448628 env[1730]: 2024-02-09 09:47:41.414 [INFO][5252] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:41.448628 env[1730]: 2024-02-09 09:47:41.435 [WARNING][5252] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" HandleID="k8s-pod-network.bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Workload="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:41.448628 env[1730]: 2024-02-09 09:47:41.435 [INFO][5252] ipam_plugin.go 443: Releasing address using workloadID ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" HandleID="k8s-pod-network.bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Workload="ip--172--31--17--0-k8s-calico--kube--controllers--66758d5cbb--p8v5t-eth0" Feb 9 09:47:41.448628 env[1730]: 2024-02-09 09:47:41.440 [INFO][5252] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:41.448628 env[1730]: 2024-02-09 09:47:41.444 [INFO][5246] k8s.go 591: Teardown processing complete. ContainerID="bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57" Feb 9 09:47:41.448628 env[1730]: time="2024-02-09T09:47:41.447522853Z" level=info msg="TearDown network for sandbox \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\" successfully" Feb 9 09:47:41.459374 env[1730]: time="2024-02-09T09:47:41.459302683Z" level=info msg="RemovePodSandbox \"bc47928b46c7f71eca306d1f1d6f112c59ef66e987ef56f0972a0ef6d510fe57\" returns successfully" Feb 9 09:47:41.460425 env[1730]: time="2024-02-09T09:47:41.460374707Z" level=info msg="StopPodSandbox for \"d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb\"" Feb 9 09:47:41.460588 env[1730]: time="2024-02-09T09:47:41.460521514Z" level=info msg="TearDown network for sandbox \"d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb\" successfully" Feb 9 09:47:41.460666 env[1730]: time="2024-02-09T09:47:41.460588720Z" level=info msg="StopPodSandbox for \"d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb\" returns successfully" Feb 9 09:47:41.461298 env[1730]: time="2024-02-09T09:47:41.461208143Z" level=info msg="RemovePodSandbox for \"d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb\"" Feb 9 09:47:41.461298 env[1730]: time="2024-02-09T09:47:41.461264634Z" level=info msg="Forcibly stopping sandbox \"d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb\"" Feb 9 09:47:41.461509 env[1730]: time="2024-02-09T09:47:41.461397295Z" level=info msg="TearDown network for sandbox \"d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb\" successfully" Feb 9 09:47:41.469920 env[1730]: time="2024-02-09T09:47:41.469822129Z" level=info msg="RemovePodSandbox \"d15da9590f91a6a216b2d65994648b2d68fa281c7a0e84f1ca171993c61609fb\" returns successfully" Feb 9 09:47:41.470868 env[1730]: time="2024-02-09T09:47:41.470808360Z" level=info msg="StopPodSandbox for \"d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493\"" Feb 9 09:47:41.471062 env[1730]: time="2024-02-09T09:47:41.470958732Z" level=info msg="TearDown network for sandbox \"d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493\" successfully" Feb 9 09:47:41.471062 env[1730]: time="2024-02-09T09:47:41.471018042Z" level=info msg="StopPodSandbox for \"d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493\" returns successfully" Feb 9 09:47:41.471727 env[1730]: time="2024-02-09T09:47:41.471656123Z" level=info msg="RemovePodSandbox for \"d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493\"" Feb 9 09:47:41.471832 env[1730]: time="2024-02-09T09:47:41.471734825Z" level=info msg="Forcibly stopping sandbox \"d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493\"" Feb 9 09:47:41.471922 env[1730]: time="2024-02-09T09:47:41.471862062Z" level=info msg="TearDown network for sandbox \"d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493\" successfully" Feb 9 09:47:41.477294 env[1730]: time="2024-02-09T09:47:41.477205406Z" level=info msg="RemovePodSandbox \"d9fedc3f407cfeef5f1a60ddc3fe4d41dc5052548e36d79f1b378b82a42c2493\" returns successfully" Feb 9 09:47:41.478065 env[1730]: time="2024-02-09T09:47:41.478024683Z" level=info msg="StopPodSandbox for \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\"" Feb 9 09:47:41.609237 env[1730]: 2024-02-09 09:47:41.540 [WARNING][5272] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"223a7223-a6dc-49ad-9622-bb87111cb4bb", ResourceVersion:"852", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 46, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991", Pod:"coredns-5dd5756b68-nvh8j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali16296b0b863", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:41.609237 env[1730]: 2024-02-09 09:47:41.540 [INFO][5272] k8s.go 578: Cleaning up netns ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:41.609237 env[1730]: 2024-02-09 09:47:41.541 [INFO][5272] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" iface="eth0" netns="" Feb 9 09:47:41.609237 env[1730]: 2024-02-09 09:47:41.541 [INFO][5272] k8s.go 585: Releasing IP address(es) ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:41.609237 env[1730]: 2024-02-09 09:47:41.541 [INFO][5272] utils.go 188: Calico CNI releasing IP address ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:41.609237 env[1730]: 2024-02-09 09:47:41.585 [INFO][5278] ipam_plugin.go 415: Releasing address using handleID ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" HandleID="k8s-pod-network.b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:41.609237 env[1730]: 2024-02-09 09:47:41.585 [INFO][5278] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:41.609237 env[1730]: 2024-02-09 09:47:41.585 [INFO][5278] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:41.609237 env[1730]: 2024-02-09 09:47:41.599 [WARNING][5278] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" HandleID="k8s-pod-network.b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:41.609237 env[1730]: 2024-02-09 09:47:41.599 [INFO][5278] ipam_plugin.go 443: Releasing address using workloadID ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" HandleID="k8s-pod-network.b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:41.609237 env[1730]: 2024-02-09 09:47:41.602 [INFO][5278] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:41.609237 env[1730]: 2024-02-09 09:47:41.606 [INFO][5272] k8s.go 591: Teardown processing complete. ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:41.610294 env[1730]: time="2024-02-09T09:47:41.610243555Z" level=info msg="TearDown network for sandbox \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\" successfully" Feb 9 09:47:41.610434 env[1730]: time="2024-02-09T09:47:41.610401377Z" level=info msg="StopPodSandbox for \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\" returns successfully" Feb 9 09:47:41.611450 env[1730]: time="2024-02-09T09:47:41.611407467Z" level=info msg="RemovePodSandbox for \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\"" Feb 9 09:47:41.611667 env[1730]: time="2024-02-09T09:47:41.611607346Z" level=info msg="Forcibly stopping sandbox \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\"" Feb 9 09:47:41.770870 env[1730]: 2024-02-09 09:47:41.686 [WARNING][5296] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"223a7223-a6dc-49ad-9622-bb87111cb4bb", ResourceVersion:"852", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 46, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"2034514dee7b08ca6d714ecfd0db16c07da17752e9bb4294958f5648b3346991", Pod:"coredns-5dd5756b68-nvh8j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali16296b0b863", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:41.770870 env[1730]: 2024-02-09 09:47:41.688 [INFO][5296] k8s.go 578: Cleaning up netns ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:41.770870 env[1730]: 2024-02-09 09:47:41.688 [INFO][5296] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" iface="eth0" netns="" Feb 9 09:47:41.770870 env[1730]: 2024-02-09 09:47:41.688 [INFO][5296] k8s.go 585: Releasing IP address(es) ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:41.770870 env[1730]: 2024-02-09 09:47:41.689 [INFO][5296] utils.go 188: Calico CNI releasing IP address ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:41.770870 env[1730]: 2024-02-09 09:47:41.741 [INFO][5302] ipam_plugin.go 415: Releasing address using handleID ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" HandleID="k8s-pod-network.b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:41.770870 env[1730]: 2024-02-09 09:47:41.741 [INFO][5302] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:41.770870 env[1730]: 2024-02-09 09:47:41.741 [INFO][5302] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:41.770870 env[1730]: 2024-02-09 09:47:41.755 [WARNING][5302] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" HandleID="k8s-pod-network.b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:41.770870 env[1730]: 2024-02-09 09:47:41.755 [INFO][5302] ipam_plugin.go 443: Releasing address using workloadID ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" HandleID="k8s-pod-network.b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--nvh8j-eth0" Feb 9 09:47:41.770870 env[1730]: 2024-02-09 09:47:41.757 [INFO][5302] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:41.770870 env[1730]: 2024-02-09 09:47:41.762 [INFO][5296] k8s.go 591: Teardown processing complete. ContainerID="b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708" Feb 9 09:47:41.772128 env[1730]: time="2024-02-09T09:47:41.771807412Z" level=info msg="TearDown network for sandbox \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\" successfully" Feb 9 09:47:41.776917 env[1730]: time="2024-02-09T09:47:41.776814005Z" level=info msg="RemovePodSandbox \"b1b21e94040d6041c08c62c9b8dad231645180e7a65bf9038e7ac35815150708\" returns successfully" Feb 9 09:47:41.777862 env[1730]: time="2024-02-09T09:47:41.777821954Z" level=info msg="StopPodSandbox for \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\"" Feb 9 09:47:41.904615 env[1730]: 2024-02-09 09:47:41.842 [WARNING][5323] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"2190b54b-3544-41a9-8cc7-2ddf7fe17f69", ResourceVersion:"821", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 46, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829", Pod:"coredns-5dd5756b68-vxrmz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"califb8d9ff4ac0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:41.904615 env[1730]: 2024-02-09 09:47:41.843 [INFO][5323] k8s.go 578: Cleaning up netns ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:41.904615 env[1730]: 2024-02-09 09:47:41.843 [INFO][5323] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" iface="eth0" netns="" Feb 9 09:47:41.904615 env[1730]: 2024-02-09 09:47:41.843 [INFO][5323] k8s.go 585: Releasing IP address(es) ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:41.904615 env[1730]: 2024-02-09 09:47:41.843 [INFO][5323] utils.go 188: Calico CNI releasing IP address ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:41.904615 env[1730]: 2024-02-09 09:47:41.875 [INFO][5330] ipam_plugin.go 415: Releasing address using handleID ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" HandleID="k8s-pod-network.4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:41.904615 env[1730]: 2024-02-09 09:47:41.875 [INFO][5330] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:41.904615 env[1730]: 2024-02-09 09:47:41.875 [INFO][5330] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:41.904615 env[1730]: 2024-02-09 09:47:41.889 [WARNING][5330] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" HandleID="k8s-pod-network.4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:41.904615 env[1730]: 2024-02-09 09:47:41.889 [INFO][5330] ipam_plugin.go 443: Releasing address using workloadID ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" HandleID="k8s-pod-network.4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:41.904615 env[1730]: 2024-02-09 09:47:41.891 [INFO][5330] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:41.904615 env[1730]: 2024-02-09 09:47:41.894 [INFO][5323] k8s.go 591: Teardown processing complete. ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:41.905769 env[1730]: time="2024-02-09T09:47:41.904658738Z" level=info msg="TearDown network for sandbox \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\" successfully" Feb 9 09:47:41.905769 env[1730]: time="2024-02-09T09:47:41.904730407Z" level=info msg="StopPodSandbox for \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\" returns successfully" Feb 9 09:47:41.906165 env[1730]: time="2024-02-09T09:47:41.906120020Z" level=info msg="RemovePodSandbox for \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\"" Feb 9 09:47:41.906390 env[1730]: time="2024-02-09T09:47:41.906328634Z" level=info msg="Forcibly stopping sandbox \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\"" Feb 9 09:47:42.081648 env[1730]: 2024-02-09 09:47:41.979 [WARNING][5349] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"2190b54b-3544-41a9-8cc7-2ddf7fe17f69", ResourceVersion:"821", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 46, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"57776abd957e3b531c4239d74a348d01cbd857c40f4e63d92957fc314cbc1829", Pod:"coredns-5dd5756b68-vxrmz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.83.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"califb8d9ff4ac0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:42.081648 env[1730]: 2024-02-09 09:47:41.980 [INFO][5349] k8s.go 578: Cleaning up netns ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:42.081648 env[1730]: 2024-02-09 09:47:41.980 [INFO][5349] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" iface="eth0" netns="" Feb 9 09:47:42.081648 env[1730]: 2024-02-09 09:47:41.980 [INFO][5349] k8s.go 585: Releasing IP address(es) ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:42.081648 env[1730]: 2024-02-09 09:47:41.980 [INFO][5349] utils.go 188: Calico CNI releasing IP address ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:42.081648 env[1730]: 2024-02-09 09:47:42.052 [INFO][5355] ipam_plugin.go 415: Releasing address using handleID ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" HandleID="k8s-pod-network.4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:42.081648 env[1730]: 2024-02-09 09:47:42.052 [INFO][5355] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:42.081648 env[1730]: 2024-02-09 09:47:42.052 [INFO][5355] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:42.081648 env[1730]: 2024-02-09 09:47:42.072 [WARNING][5355] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" HandleID="k8s-pod-network.4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:42.081648 env[1730]: 2024-02-09 09:47:42.072 [INFO][5355] ipam_plugin.go 443: Releasing address using workloadID ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" HandleID="k8s-pod-network.4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Workload="ip--172--31--17--0-k8s-coredns--5dd5756b68--vxrmz-eth0" Feb 9 09:47:42.081648 env[1730]: 2024-02-09 09:47:42.075 [INFO][5355] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:42.081648 env[1730]: 2024-02-09 09:47:42.079 [INFO][5349] k8s.go 591: Teardown processing complete. ContainerID="4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576" Feb 9 09:47:42.082622 env[1730]: time="2024-02-09T09:47:42.081722810Z" level=info msg="TearDown network for sandbox \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\" successfully" Feb 9 09:47:42.096915 env[1730]: time="2024-02-09T09:47:42.096839439Z" level=info msg="RemovePodSandbox \"4680c03711eeaa6f6381b00b461cb9a2a3e70b30464999a7e9f3c34236f4f576\" returns successfully" Feb 9 09:47:42.097800 env[1730]: time="2024-02-09T09:47:42.097746974Z" level=info msg="StopPodSandbox for \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\"" Feb 9 09:47:42.256761 env[1730]: 2024-02-09 09:47:42.185 [WARNING][5375] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"bc0b6437-68a5-497b-8560-3205bb08c4b9", ResourceVersion:"834", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 47, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae", Pod:"csi-node-driver-xk7qk", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.83.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calife1a486ed3a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:42.256761 env[1730]: 2024-02-09 09:47:42.185 [INFO][5375] k8s.go 578: Cleaning up netns ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:42.256761 env[1730]: 2024-02-09 09:47:42.185 [INFO][5375] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" iface="eth0" netns="" Feb 9 09:47:42.256761 env[1730]: 2024-02-09 09:47:42.185 [INFO][5375] k8s.go 585: Releasing IP address(es) ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:42.256761 env[1730]: 2024-02-09 09:47:42.186 [INFO][5375] utils.go 188: Calico CNI releasing IP address ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:42.256761 env[1730]: 2024-02-09 09:47:42.230 [INFO][5381] ipam_plugin.go 415: Releasing address using handleID ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" HandleID="k8s-pod-network.60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Workload="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:42.256761 env[1730]: 2024-02-09 09:47:42.230 [INFO][5381] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:42.256761 env[1730]: 2024-02-09 09:47:42.230 [INFO][5381] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:42.256761 env[1730]: 2024-02-09 09:47:42.244 [WARNING][5381] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" HandleID="k8s-pod-network.60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Workload="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:42.256761 env[1730]: 2024-02-09 09:47:42.244 [INFO][5381] ipam_plugin.go 443: Releasing address using workloadID ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" HandleID="k8s-pod-network.60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Workload="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:42.256761 env[1730]: 2024-02-09 09:47:42.251 [INFO][5381] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:42.256761 env[1730]: 2024-02-09 09:47:42.254 [INFO][5375] k8s.go 591: Teardown processing complete. ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:42.259867 env[1730]: time="2024-02-09T09:47:42.259809382Z" level=info msg="TearDown network for sandbox \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\" successfully" Feb 9 09:47:42.260096 env[1730]: time="2024-02-09T09:47:42.260050418Z" level=info msg="StopPodSandbox for \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\" returns successfully" Feb 9 09:47:42.261810 env[1730]: time="2024-02-09T09:47:42.261722555Z" level=info msg="RemovePodSandbox for \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\"" Feb 9 09:47:42.261999 env[1730]: time="2024-02-09T09:47:42.261784734Z" level=info msg="Forcibly stopping sandbox \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\"" Feb 9 09:47:42.438029 env[1730]: 2024-02-09 09:47:42.366 [WARNING][5402] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"bc0b6437-68a5-497b-8560-3205bb08c4b9", ResourceVersion:"834", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 47, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae", Pod:"csi-node-driver-xk7qk", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.83.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calife1a486ed3a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:47:42.438029 env[1730]: 2024-02-09 09:47:42.366 [INFO][5402] k8s.go 578: Cleaning up netns ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:42.438029 env[1730]: 2024-02-09 09:47:42.366 [INFO][5402] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" iface="eth0" netns="" Feb 9 09:47:42.438029 env[1730]: 2024-02-09 09:47:42.366 [INFO][5402] k8s.go 585: Releasing IP address(es) ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:42.438029 env[1730]: 2024-02-09 09:47:42.366 [INFO][5402] utils.go 188: Calico CNI releasing IP address ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:42.438029 env[1730]: 2024-02-09 09:47:42.414 [INFO][5408] ipam_plugin.go 415: Releasing address using handleID ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" HandleID="k8s-pod-network.60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Workload="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:42.438029 env[1730]: 2024-02-09 09:47:42.415 [INFO][5408] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:47:42.438029 env[1730]: 2024-02-09 09:47:42.415 [INFO][5408] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:47:42.438029 env[1730]: 2024-02-09 09:47:42.430 [WARNING][5408] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" HandleID="k8s-pod-network.60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Workload="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:42.438029 env[1730]: 2024-02-09 09:47:42.430 [INFO][5408] ipam_plugin.go 443: Releasing address using workloadID ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" HandleID="k8s-pod-network.60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Workload="ip--172--31--17--0-k8s-csi--node--driver--xk7qk-eth0" Feb 9 09:47:42.438029 env[1730]: 2024-02-09 09:47:42.433 [INFO][5408] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:47:42.438029 env[1730]: 2024-02-09 09:47:42.435 [INFO][5402] k8s.go 591: Teardown processing complete. ContainerID="60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c" Feb 9 09:47:42.440229 env[1730]: time="2024-02-09T09:47:42.437989138Z" level=info msg="TearDown network for sandbox \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\" successfully" Feb 9 09:47:42.444960 env[1730]: time="2024-02-09T09:47:42.444890812Z" level=info msg="RemovePodSandbox \"60873a8473fb17183c590162364c11a78d8d346044837a5ed64293edf135fe4c\" returns successfully" Feb 9 09:47:42.487260 env[1730]: time="2024-02-09T09:47:42.487206445Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:42.492538 env[1730]: time="2024-02-09T09:47:42.492485790Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9dbda087e98c46610fb8629cf530f1fe49eee4b17d2afe455664ca446ec39d43,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:42.497811 env[1730]: time="2024-02-09T09:47:42.497759244Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:42.502159 env[1730]: time="2024-02-09T09:47:42.502105808Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:45a7aba6020a7cf7b866cb8a8d481b30c97e9b3407e1459aaa65a5b4cc06633a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:47:42.504463 env[1730]: time="2024-02-09T09:47:42.503532265Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\" returns image reference \"sha256:9dbda087e98c46610fb8629cf530f1fe49eee4b17d2afe455664ca446ec39d43\"" Feb 9 09:47:42.511322 env[1730]: time="2024-02-09T09:47:42.511267175Z" level=info msg="CreateContainer within sandbox \"f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Feb 9 09:47:42.539241 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2915545566.mount: Deactivated successfully. Feb 9 09:47:42.546361 env[1730]: time="2024-02-09T09:47:42.546108373Z" level=info msg="CreateContainer within sandbox \"f756d3e8f92a4cad1fa9aa28563f7ed39e92a53e06caa784fe67238778c7c7ae\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"0cddb1be33341cebaa402d90bd1479fadcf2f96e1d25582bf5fc52c420c19037\"" Feb 9 09:47:42.554624 env[1730]: time="2024-02-09T09:47:42.554561570Z" level=info msg="StartContainer for \"0cddb1be33341cebaa402d90bd1479fadcf2f96e1d25582bf5fc52c420c19037\"" Feb 9 09:47:42.601150 systemd[1]: Started cri-containerd-0cddb1be33341cebaa402d90bd1479fadcf2f96e1d25582bf5fc52c420c19037.scope. Feb 9 09:47:42.624308 systemd[1]: run-containerd-runc-k8s.io-0cddb1be33341cebaa402d90bd1479fadcf2f96e1d25582bf5fc52c420c19037-runc.09rFCE.mount: Deactivated successfully. Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4859 pid=5422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:42.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063646462316265333333343163656261613430326439306264313437 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit: BPF prog-id=200 op=LOAD Feb 9 09:47:42.676000 audit[5422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4859 pid=5422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:42.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063646462316265333333343163656261613430326439306264313437 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.676000 audit: BPF prog-id=201 op=LOAD Feb 9 09:47:42.676000 audit[5422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4859 pid=5422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:42.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063646462316265333333343163656261613430326439306264313437 Feb 9 09:47:42.677000 audit: BPF prog-id=201 op=UNLOAD Feb 9 09:47:42.677000 audit: BPF prog-id=200 op=UNLOAD Feb 9 09:47:42.677000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.677000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.677000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.677000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.677000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.677000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.677000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.677000 audit[5422]: AVC avc: denied { perfmon } for pid=5422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.677000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.677000 audit[5422]: AVC avc: denied { bpf } for pid=5422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:47:42.677000 audit: BPF prog-id=202 op=LOAD Feb 9 09:47:42.677000 audit[5422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4859 pid=5422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:42.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063646462316265333333343163656261613430326439306264313437 Feb 9 09:47:42.721551 env[1730]: time="2024-02-09T09:47:42.721273769Z" level=info msg="StartContainer for \"0cddb1be33341cebaa402d90bd1479fadcf2f96e1d25582bf5fc52c420c19037\" returns successfully" Feb 9 09:47:43.738382 kubelet[2782]: I0209 09:47:43.738336 2782 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Feb 9 09:47:43.739242 kubelet[2782]: I0209 09:47:43.739218 2782 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Feb 9 09:47:45.115419 systemd[1]: Started sshd@9-172.31.17.0:22-139.178.89.65:57940.service. Feb 9 09:47:45.119441 kernel: kauditd_printk_skb: 86 callbacks suppressed Feb 9 09:47:45.119580 kernel: audit: type=1130 audit(1707472065.115:1434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.17.0:22-139.178.89.65:57940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:45.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.17.0:22-139.178.89.65:57940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:45.304000 audit[5462]: USER_ACCT pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:45.306374 sshd[5462]: Accepted publickey for core from 139.178.89.65 port 57940 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:47:45.315789 kernel: audit: type=1101 audit(1707472065.304:1435): pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:45.316000 audit[5462]: CRED_ACQ pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:45.318668 sshd[5462]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:47:45.333869 kernel: audit: type=1103 audit(1707472065.316:1436): pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:45.334038 kernel: audit: type=1006 audit(1707472065.316:1437): pid=5462 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Feb 9 09:47:45.334115 kernel: audit: type=1300 audit(1707472065.316:1437): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd65d8920 a2=3 a3=1 items=0 ppid=1 pid=5462 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:45.316000 audit[5462]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd65d8920 a2=3 a3=1 items=0 ppid=1 pid=5462 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:45.316000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:47:45.347868 kernel: audit: type=1327 audit(1707472065.316:1437): proctitle=737368643A20636F7265205B707269765D Feb 9 09:47:45.354076 systemd[1]: Started session-10.scope. Feb 9 09:47:45.354906 systemd-logind[1716]: New session 10 of user core. Feb 9 09:47:45.363000 audit[5462]: USER_START pid=5462 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:45.367000 audit[5466]: CRED_ACQ pid=5466 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:45.386944 kernel: audit: type=1105 audit(1707472065.363:1438): pid=5462 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:45.387084 kernel: audit: type=1103 audit(1707472065.367:1439): pid=5466 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:45.608304 sshd[5462]: pam_unix(sshd:session): session closed for user core Feb 9 09:47:45.609000 audit[5462]: USER_END pid=5462 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:45.609000 audit[5462]: CRED_DISP pid=5462 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:45.621963 systemd[1]: sshd@9-172.31.17.0:22-139.178.89.65:57940.service: Deactivated successfully. Feb 9 09:47:45.630973 kernel: audit: type=1106 audit(1707472065.609:1440): pid=5462 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:45.631103 kernel: audit: type=1104 audit(1707472065.609:1441): pid=5462 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:45.623269 systemd[1]: session-10.scope: Deactivated successfully. Feb 9 09:47:45.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.17.0:22-139.178.89.65:57940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:45.632542 systemd-logind[1716]: Session 10 logged out. Waiting for processes to exit. Feb 9 09:47:45.634609 systemd-logind[1716]: Removed session 10. Feb 9 09:47:50.232000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:50.234748 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 09:47:50.234837 kernel: audit: type=1400 audit(1707472070.232:1443): avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:50.232000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000caefa0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:47:50.256152 kernel: audit: type=1300 audit(1707472070.232:1443): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000caefa0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:47:50.256314 kernel: audit: type=1327 audit(1707472070.232:1443): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:47:50.232000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:47:50.240000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:50.275495 kernel: audit: type=1400 audit(1707472070.240:1444): avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:50.275599 kernel: audit: type=1300 audit(1707472070.240:1444): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000caf020 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:47:50.240000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000caf020 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:47:50.240000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:47:50.298006 kernel: audit: type=1327 audit(1707472070.240:1444): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:47:50.243000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:50.307713 kernel: audit: type=1400 audit(1707472070.243:1445): avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:50.307817 kernel: audit: type=1300 audit(1707472070.243:1445): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000caf280 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:47:50.243000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000caf280 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:47:50.243000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:47:50.329763 kernel: audit: type=1327 audit(1707472070.243:1445): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:47:50.329906 kernel: audit: type=1400 audit(1707472070.243:1446): avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:50.243000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:47:50.243000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000903dc0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:47:50.243000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:47:50.638717 systemd[1]: Started sshd@10-172.31.17.0:22-139.178.89.65:40864.service. Feb 9 09:47:50.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.17.0:22-139.178.89.65:40864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:50.820000 audit[5497]: USER_ACCT pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:50.822906 sshd[5497]: Accepted publickey for core from 139.178.89.65 port 40864 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:47:50.823000 audit[5497]: CRED_ACQ pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:50.823000 audit[5497]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd35ef150 a2=3 a3=1 items=0 ppid=1 pid=5497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:50.823000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:47:50.824819 sshd[5497]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:47:50.834227 systemd[1]: Started session-11.scope. Feb 9 09:47:50.835155 systemd-logind[1716]: New session 11 of user core. Feb 9 09:47:50.844000 audit[5497]: USER_START pid=5497 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:50.847000 audit[5499]: CRED_ACQ pid=5499 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:51.099429 sshd[5497]: pam_unix(sshd:session): session closed for user core Feb 9 09:47:51.101000 audit[5497]: USER_END pid=5497 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:51.101000 audit[5497]: CRED_DISP pid=5497 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:51.104923 systemd[1]: sshd@10-172.31.17.0:22-139.178.89.65:40864.service: Deactivated successfully. Feb 9 09:47:51.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.17.0:22-139.178.89.65:40864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:51.106362 systemd[1]: session-11.scope: Deactivated successfully. Feb 9 09:47:51.107955 systemd-logind[1716]: Session 11 logged out. Waiting for processes to exit. Feb 9 09:47:51.110026 systemd-logind[1716]: Removed session 11. Feb 9 09:47:51.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.17.0:22-139.178.89.65:40870 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:51.127207 systemd[1]: Started sshd@11-172.31.17.0:22-139.178.89.65:40870.service. Feb 9 09:47:51.302000 audit[5510]: USER_ACCT pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:51.303494 sshd[5510]: Accepted publickey for core from 139.178.89.65 port 40870 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:47:51.304000 audit[5510]: CRED_ACQ pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:51.304000 audit[5510]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6803260 a2=3 a3=1 items=0 ppid=1 pid=5510 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:51.304000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:47:51.306667 sshd[5510]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:47:51.315835 systemd[1]: Started session-12.scope. Feb 9 09:47:51.317793 systemd-logind[1716]: New session 12 of user core. Feb 9 09:47:51.326000 audit[5510]: USER_START pid=5510 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:51.329000 audit[5512]: CRED_ACQ pid=5512 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:51.873556 sshd[5510]: pam_unix(sshd:session): session closed for user core Feb 9 09:47:51.875000 audit[5510]: USER_END pid=5510 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:51.875000 audit[5510]: CRED_DISP pid=5510 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:51.879788 systemd[1]: sshd@11-172.31.17.0:22-139.178.89.65:40870.service: Deactivated successfully. Feb 9 09:47:51.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.17.0:22-139.178.89.65:40870 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:51.881593 systemd[1]: session-12.scope: Deactivated successfully. Feb 9 09:47:51.883349 systemd-logind[1716]: Session 12 logged out. Waiting for processes to exit. Feb 9 09:47:51.885897 systemd-logind[1716]: Removed session 12. Feb 9 09:47:51.914153 systemd[1]: Started sshd@12-172.31.17.0:22-139.178.89.65:40878.service. Feb 9 09:47:51.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.17.0:22-139.178.89.65:40878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:52.097185 sshd[5520]: Accepted publickey for core from 139.178.89.65 port 40878 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:47:52.096000 audit[5520]: USER_ACCT pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:52.100409 sshd[5520]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:47:52.098000 audit[5520]: CRED_ACQ pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:52.099000 audit[5520]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8fe9930 a2=3 a3=1 items=0 ppid=1 pid=5520 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:52.099000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:47:52.108433 systemd-logind[1716]: New session 13 of user core. Feb 9 09:47:52.109259 systemd[1]: Started session-13.scope. Feb 9 09:47:52.119000 audit[5520]: USER_START pid=5520 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:52.121000 audit[5522]: CRED_ACQ pid=5522 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:52.373950 sshd[5520]: pam_unix(sshd:session): session closed for user core Feb 9 09:47:52.375000 audit[5520]: USER_END pid=5520 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:52.376000 audit[5520]: CRED_DISP pid=5520 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:52.379370 systemd[1]: session-13.scope: Deactivated successfully. Feb 9 09:47:52.380553 systemd[1]: sshd@12-172.31.17.0:22-139.178.89.65:40878.service: Deactivated successfully. Feb 9 09:47:52.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.17.0:22-139.178.89.65:40878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:52.382968 systemd-logind[1716]: Session 13 logged out. Waiting for processes to exit. Feb 9 09:47:52.385869 systemd-logind[1716]: Removed session 13. Feb 9 09:47:57.417432 kernel: kauditd_printk_skb: 35 callbacks suppressed Feb 9 09:47:57.417616 kernel: audit: type=1130 audit(1707472077.404:1474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.17.0:22-139.178.89.65:40888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:57.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.17.0:22-139.178.89.65:40888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:57.405385 systemd[1]: Started sshd@13-172.31.17.0:22-139.178.89.65:40888.service. Feb 9 09:47:57.585000 audit[5543]: USER_ACCT pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:57.587651 sshd[5543]: Accepted publickey for core from 139.178.89.65 port 40888 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:47:57.590705 sshd[5543]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:47:57.588000 audit[5543]: CRED_ACQ pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:57.607190 kernel: audit: type=1101 audit(1707472077.585:1475): pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:57.607296 kernel: audit: type=1103 audit(1707472077.588:1476): pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:57.613517 kernel: audit: type=1006 audit(1707472077.588:1477): pid=5543 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Feb 9 09:47:57.588000 audit[5543]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc17ad5d0 a2=3 a3=1 items=0 ppid=1 pid=5543 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:57.619915 systemd-logind[1716]: New session 14 of user core. Feb 9 09:47:57.620891 systemd[1]: Started session-14.scope. Feb 9 09:47:57.625545 kernel: audit: type=1300 audit(1707472077.588:1477): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc17ad5d0 a2=3 a3=1 items=0 ppid=1 pid=5543 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:47:57.625663 kernel: audit: type=1327 audit(1707472077.588:1477): proctitle=737368643A20636F7265205B707269765D Feb 9 09:47:57.588000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:47:57.634000 audit[5543]: USER_START pid=5543 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:57.637000 audit[5545]: CRED_ACQ pid=5545 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:57.656872 kernel: audit: type=1105 audit(1707472077.634:1478): pid=5543 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:57.656981 kernel: audit: type=1103 audit(1707472077.637:1479): pid=5545 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:57.912878 sshd[5543]: pam_unix(sshd:session): session closed for user core Feb 9 09:47:57.913000 audit[5543]: USER_END pid=5543 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:57.917638 systemd[1]: session-14.scope: Deactivated successfully. Feb 9 09:47:57.918987 systemd[1]: sshd@13-172.31.17.0:22-139.178.89.65:40888.service: Deactivated successfully. Feb 9 09:47:57.913000 audit[5543]: CRED_DISP pid=5543 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:57.936926 kernel: audit: type=1106 audit(1707472077.913:1480): pid=5543 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:57.937102 kernel: audit: type=1104 audit(1707472077.913:1481): pid=5543 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:47:57.937145 systemd-logind[1716]: Session 14 logged out. Waiting for processes to exit. Feb 9 09:47:57.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.17.0:22-139.178.89.65:40888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:47:57.939072 systemd-logind[1716]: Removed session 14. Feb 9 09:48:02.942272 systemd[1]: Started sshd@14-172.31.17.0:22-139.178.89.65:34906.service. Feb 9 09:48:02.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.0:22-139.178.89.65:34906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:02.945592 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 09:48:02.945664 kernel: audit: type=1130 audit(1707472082.941:1483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.0:22-139.178.89.65:34906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:03.132000 audit[5560]: USER_ACCT pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:03.135625 sshd[5560]: Accepted publickey for core from 139.178.89.65 port 34906 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:03.145277 sshd[5560]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:03.145825 kernel: audit: type=1101 audit(1707472083.132:1484): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:03.145878 kernel: audit: type=1103 audit(1707472083.143:1485): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:03.143000 audit[5560]: CRED_ACQ pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:03.161428 kernel: audit: type=1006 audit(1707472083.143:1486): pid=5560 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Feb 9 09:48:03.143000 audit[5560]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe119c250 a2=3 a3=1 items=0 ppid=1 pid=5560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:03.172142 kernel: audit: type=1300 audit(1707472083.143:1486): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe119c250 a2=3 a3=1 items=0 ppid=1 pid=5560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:03.143000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:03.177138 kernel: audit: type=1327 audit(1707472083.143:1486): proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:03.179862 systemd-logind[1716]: New session 15 of user core. Feb 9 09:48:03.182042 systemd[1]: Started session-15.scope. Feb 9 09:48:03.190000 audit[5560]: USER_START pid=5560 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:03.205248 kernel: audit: type=1105 audit(1707472083.190:1487): pid=5560 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:03.204000 audit[5562]: CRED_ACQ pid=5562 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:03.215730 kernel: audit: type=1103 audit(1707472083.204:1488): pid=5562 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:03.474525 sshd[5560]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:03.475000 audit[5560]: USER_END pid=5560 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:03.480819 systemd-logind[1716]: Session 15 logged out. Waiting for processes to exit. Feb 9 09:48:03.483552 systemd[1]: session-15.scope: Deactivated successfully. Feb 9 09:48:03.485397 systemd[1]: sshd@14-172.31.17.0:22-139.178.89.65:34906.service: Deactivated successfully. Feb 9 09:48:03.487925 systemd-logind[1716]: Removed session 15. Feb 9 09:48:03.475000 audit[5560]: CRED_DISP pid=5560 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:03.498064 kernel: audit: type=1106 audit(1707472083.475:1489): pid=5560 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:03.498179 kernel: audit: type=1104 audit(1707472083.475:1490): pid=5560 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:03.481000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.0:22-139.178.89.65:34906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:08.506257 systemd[1]: Started sshd@15-172.31.17.0:22-139.178.89.65:56672.service. Feb 9 09:48:08.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.0:22-139.178.89.65:56672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:08.513983 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 09:48:08.514144 kernel: audit: type=1130 audit(1707472088.510:1492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.0:22-139.178.89.65:56672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:08.697270 sshd[5573]: Accepted publickey for core from 139.178.89.65 port 56672 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:08.695000 audit[5573]: USER_ACCT pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:08.708350 sshd[5573]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:08.709723 kernel: audit: type=1101 audit(1707472088.695:1493): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:08.702000 audit[5573]: CRED_ACQ pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:08.721167 kernel: audit: type=1103 audit(1707472088.702:1494): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:08.721306 kernel: audit: type=1006 audit(1707472088.702:1495): pid=5573 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Feb 9 09:48:08.702000 audit[5573]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcde6e3a0 a2=3 a3=1 items=0 ppid=1 pid=5573 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:08.726603 systemd-logind[1716]: New session 16 of user core. Feb 9 09:48:08.729281 systemd[1]: Started session-16.scope. Feb 9 09:48:08.736629 kernel: audit: type=1300 audit(1707472088.702:1495): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcde6e3a0 a2=3 a3=1 items=0 ppid=1 pid=5573 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:08.702000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:08.740378 kernel: audit: type=1327 audit(1707472088.702:1495): proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:08.744000 audit[5573]: USER_START pid=5573 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:08.760746 kernel: audit: type=1105 audit(1707472088.744:1496): pid=5573 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:08.758000 audit[5575]: CRED_ACQ pid=5575 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:08.772726 kernel: audit: type=1103 audit(1707472088.758:1497): pid=5575 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:09.086856 sshd[5573]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:09.086000 audit[5573]: USER_END pid=5573 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:09.102322 systemd[1]: sshd@15-172.31.17.0:22-139.178.89.65:56672.service: Deactivated successfully. Feb 9 09:48:09.103626 systemd[1]: session-16.scope: Deactivated successfully. Feb 9 09:48:09.105637 systemd-logind[1716]: Session 16 logged out. Waiting for processes to exit. Feb 9 09:48:09.107731 kernel: audit: type=1106 audit(1707472089.086:1498): pid=5573 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:09.107670 systemd-logind[1716]: Removed session 16. Feb 9 09:48:09.087000 audit[5573]: CRED_DISP pid=5573 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:09.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.0:22-139.178.89.65:56672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:09.118702 kernel: audit: type=1104 audit(1707472089.087:1499): pid=5573 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.127887 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 09:48:14.128009 kernel: audit: type=1130 audit(1707472094.115:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.17.0:22-139.178.89.65:56674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:14.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.17.0:22-139.178.89.65:56674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:14.117001 systemd[1]: Started sshd@16-172.31.17.0:22-139.178.89.65:56674.service. Feb 9 09:48:14.232020 kubelet[2782]: I0209 09:48:14.231940 2782 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-xk7qk" podStartSLOduration=65.633482804 podCreationTimestamp="2024-02-09 09:47:01 +0000 UTC" firstStartedPulling="2024-02-09 09:47:34.906661492 +0000 UTC m=+54.263314828" lastFinishedPulling="2024-02-09 09:47:42.505035227 +0000 UTC m=+61.861688587" observedRunningTime="2024-02-09 09:47:42.929814898 +0000 UTC m=+62.286468258" watchObservedRunningTime="2024-02-09 09:48:14.231856563 +0000 UTC m=+93.588509923" Feb 9 09:48:14.232737 kubelet[2782]: I0209 09:48:14.232374 2782 topology_manager.go:215] "Topology Admit Handler" podUID="8dce8da2-8eeb-4629-9778-00c2fd7650a7" podNamespace="calico-apiserver" podName="calico-apiserver-546697695f-gk2t5" Feb 9 09:48:14.246840 systemd[1]: Created slice kubepods-besteffort-pod8dce8da2_8eeb_4629_9778_00c2fd7650a7.slice. Feb 9 09:48:14.293476 kubelet[2782]: I0209 09:48:14.293428 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7dht2\" (UniqueName: \"kubernetes.io/projected/8dce8da2-8eeb-4629-9778-00c2fd7650a7-kube-api-access-7dht2\") pod \"calico-apiserver-546697695f-gk2t5\" (UID: \"8dce8da2-8eeb-4629-9778-00c2fd7650a7\") " pod="calico-apiserver/calico-apiserver-546697695f-gk2t5" Feb 9 09:48:14.293829 kubelet[2782]: I0209 09:48:14.293803 2782 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/8dce8da2-8eeb-4629-9778-00c2fd7650a7-calico-apiserver-certs\") pod \"calico-apiserver-546697695f-gk2t5\" (UID: \"8dce8da2-8eeb-4629-9778-00c2fd7650a7\") " pod="calico-apiserver/calico-apiserver-546697695f-gk2t5" Feb 9 09:48:14.308000 audit[5606]: USER_ACCT pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.312828 sshd[5606]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:14.320945 sshd[5606]: Accepted publickey for core from 139.178.89.65 port 56674 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:14.310000 audit[5606]: CRED_ACQ pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.322715 kernel: audit: type=1101 audit(1707472094.308:1502): pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.337341 systemd-logind[1716]: New session 17 of user core. Feb 9 09:48:14.339578 systemd[1]: Started session-17.scope. Feb 9 09:48:14.351916 kernel: audit: type=1103 audit(1707472094.310:1503): pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.352073 kernel: audit: type=1006 audit(1707472094.310:1504): pid=5606 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Feb 9 09:48:14.310000 audit[5606]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbe03d30 a2=3 a3=1 items=0 ppid=1 pid=5606 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:14.365094 kernel: audit: type=1300 audit(1707472094.310:1504): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbe03d30 a2=3 a3=1 items=0 ppid=1 pid=5606 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:14.310000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:14.370065 kernel: audit: type=1327 audit(1707472094.310:1504): proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:14.381695 kernel: audit: type=1105 audit(1707472094.368:1505): pid=5606 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.368000 audit[5606]: USER_START pid=5606 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.382000 audit[5610]: CRED_ACQ pid=5610 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.394717 kernel: audit: type=1103 audit(1707472094.382:1506): pid=5610 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.389000 audit[5609]: NETFILTER_CFG table=filter:117 family=2 entries=9 op=nft_register_rule pid=5609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:14.395407 kubelet[2782]: E0209 09:48:14.395369 2782 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Feb 9 09:48:14.395643 kubelet[2782]: E0209 09:48:14.395620 2782 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/8dce8da2-8eeb-4629-9778-00c2fd7650a7-calico-apiserver-certs podName:8dce8da2-8eeb-4629-9778-00c2fd7650a7 nodeName:}" failed. No retries permitted until 2024-02-09 09:48:14.895589152 +0000 UTC m=+94.252242488 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/8dce8da2-8eeb-4629-9778-00c2fd7650a7-calico-apiserver-certs") pod "calico-apiserver-546697695f-gk2t5" (UID: "8dce8da2-8eeb-4629-9778-00c2fd7650a7") : secret "calico-apiserver-certs" not found Feb 9 09:48:14.389000 audit[5609]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffddf8c9d0 a2=0 a3=ffff871626c0 items=0 ppid=3176 pid=5609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:14.404910 kernel: audit: type=1325 audit(1707472094.389:1507): table=filter:117 family=2 entries=9 op=nft_register_rule pid=5609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:14.389000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:14.395000 audit[5609]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=5609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:14.422702 kernel: audit: type=1300 audit(1707472094.389:1507): arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffddf8c9d0 a2=0 a3=ffff871626c0 items=0 ppid=3176 pid=5609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:14.395000 audit[5609]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffddf8c9d0 a2=0 a3=ffff871626c0 items=0 ppid=3176 pid=5609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:14.395000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:14.534000 audit[5619]: NETFILTER_CFG table=filter:119 family=2 entries=10 op=nft_register_rule pid=5619 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:14.534000 audit[5619]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=fffff0db35a0 a2=0 a3=ffff833296c0 items=0 ppid=3176 pid=5619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:14.534000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:14.550000 audit[5619]: NETFILTER_CFG table=nat:120 family=2 entries=20 op=nft_register_rule pid=5619 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:14.550000 audit[5619]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=fffff0db35a0 a2=0 a3=ffff833296c0 items=0 ppid=3176 pid=5619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:14.550000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:14.674069 sshd[5606]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:14.676000 audit[5606]: USER_END pid=5606 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.676000 audit[5606]: CRED_DISP pid=5606 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.17.0:22-139.178.89.65:56674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:14.681311 systemd-logind[1716]: Session 17 logged out. Waiting for processes to exit. Feb 9 09:48:14.681898 systemd[1]: sshd@16-172.31.17.0:22-139.178.89.65:56674.service: Deactivated successfully. Feb 9 09:48:14.684019 systemd[1]: session-17.scope: Deactivated successfully. Feb 9 09:48:14.686530 systemd-logind[1716]: Removed session 17. Feb 9 09:48:14.705435 systemd[1]: Started sshd@17-172.31.17.0:22-139.178.89.65:56684.service. Feb 9 09:48:14.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.17.0:22-139.178.89.65:56684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:14.889000 audit[5623]: USER_ACCT pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.891269 sshd[5623]: Accepted publickey for core from 139.178.89.65 port 56684 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:14.891000 audit[5623]: CRED_ACQ pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.891000 audit[5623]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5014770 a2=3 a3=1 items=0 ppid=1 pid=5623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:14.891000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:14.893879 sshd[5623]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:14.906116 systemd[1]: Started session-18.scope. Feb 9 09:48:14.908773 systemd-logind[1716]: New session 18 of user core. Feb 9 09:48:14.935000 audit[5623]: USER_START pid=5623 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:14.938000 audit[5630]: CRED_ACQ pid=5630 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:15.159340 env[1730]: time="2024-02-09T09:48:15.158606060Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-546697695f-gk2t5,Uid:8dce8da2-8eeb-4629-9778-00c2fd7650a7,Namespace:calico-apiserver,Attempt:0,}" Feb 9 09:48:15.469927 sshd[5623]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:15.471000 audit[5623]: USER_END pid=5623 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:15.472000 audit[5623]: CRED_DISP pid=5623 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:15.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.17.0:22-139.178.89.65:56684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:15.477141 systemd[1]: sshd@17-172.31.17.0:22-139.178.89.65:56684.service: Deactivated successfully. Feb 9 09:48:15.478453 systemd[1]: session-18.scope: Deactivated successfully. Feb 9 09:48:15.481745 systemd-logind[1716]: Session 18 logged out. Waiting for processes to exit. Feb 9 09:48:15.483250 systemd-logind[1716]: Removed session 18. Feb 9 09:48:15.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.17.0:22-139.178.89.65:56690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:15.500052 systemd[1]: Started sshd@18-172.31.17.0:22-139.178.89.65:56690.service. Feb 9 09:48:15.539402 systemd-networkd[1537]: calib7460abce3c: Link UP Feb 9 09:48:15.546730 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 09:48:15.546874 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib7460abce3c: link becomes ready Feb 9 09:48:15.546056 systemd-networkd[1537]: calib7460abce3c: Gained carrier Feb 9 09:48:15.553633 (udev-worker)[5660]: Network interface NamePolicy= disabled on kernel command line. Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.302 [INFO][5637] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-eth0 calico-apiserver-546697695f- calico-apiserver 8dce8da2-8eeb-4629-9778-00c2fd7650a7 1097 0 2024-02-09 09:48:14 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:546697695f projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-17-0 calico-apiserver-546697695f-gk2t5 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calib7460abce3c [] []}} ContainerID="61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" Namespace="calico-apiserver" Pod="calico-apiserver-546697695f-gk2t5" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-" Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.303 [INFO][5637] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" Namespace="calico-apiserver" Pod="calico-apiserver-546697695f-gk2t5" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-eth0" Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.371 [INFO][5651] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" HandleID="k8s-pod-network.61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" Workload="ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-eth0" Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.428 [INFO][5651] ipam_plugin.go 268: Auto assigning IP ContainerID="61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" HandleID="k8s-pod-network.61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" Workload="ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c54c0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-17-0", "pod":"calico-apiserver-546697695f-gk2t5", "timestamp":"2024-02-09 09:48:15.371331931 +0000 UTC"}, Hostname:"ip-172-31-17-0", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.428 [INFO][5651] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.429 [INFO][5651] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.429 [INFO][5651] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-17-0' Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.436 [INFO][5651] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" host="ip-172-31-17-0" Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.450 [INFO][5651] ipam.go 372: Looking up existing affinities for host host="ip-172-31-17-0" Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.466 [INFO][5651] ipam.go 489: Trying affinity for 192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.472 [INFO][5651] ipam.go 155: Attempting to load block cidr=192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.485 [INFO][5651] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.83.0/26 host="ip-172-31-17-0" Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.485 [INFO][5651] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.83.0/26 handle="k8s-pod-network.61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" host="ip-172-31-17-0" Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.498 [INFO][5651] ipam.go 1682: Creating new handle: k8s-pod-network.61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484 Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.516 [INFO][5651] ipam.go 1203: Writing block in order to claim IPs block=192.168.83.0/26 handle="k8s-pod-network.61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" host="ip-172-31-17-0" Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.528 [INFO][5651] ipam.go 1216: Successfully claimed IPs: [192.168.83.5/26] block=192.168.83.0/26 handle="k8s-pod-network.61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" host="ip-172-31-17-0" Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.528 [INFO][5651] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.83.5/26] handle="k8s-pod-network.61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" host="ip-172-31-17-0" Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.528 [INFO][5651] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 09:48:15.572901 env[1730]: 2024-02-09 09:48:15.528 [INFO][5651] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.83.5/26] IPv6=[] ContainerID="61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" HandleID="k8s-pod-network.61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" Workload="ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-eth0" Feb 9 09:48:15.574480 env[1730]: 2024-02-09 09:48:15.532 [INFO][5637] k8s.go 385: Populated endpoint ContainerID="61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" Namespace="calico-apiserver" Pod="calico-apiserver-546697695f-gk2t5" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-eth0", GenerateName:"calico-apiserver-546697695f-", Namespace:"calico-apiserver", SelfLink:"", UID:"8dce8da2-8eeb-4629-9778-00c2fd7650a7", ResourceVersion:"1097", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 48, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"546697695f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"", Pod:"calico-apiserver-546697695f-gk2t5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.83.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib7460abce3c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:48:15.574480 env[1730]: 2024-02-09 09:48:15.532 [INFO][5637] k8s.go 386: Calico CNI using IPs: [192.168.83.5/32] ContainerID="61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" Namespace="calico-apiserver" Pod="calico-apiserver-546697695f-gk2t5" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-eth0" Feb 9 09:48:15.574480 env[1730]: 2024-02-09 09:48:15.532 [INFO][5637] dataplane_linux.go 68: Setting the host side veth name to calib7460abce3c ContainerID="61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" Namespace="calico-apiserver" Pod="calico-apiserver-546697695f-gk2t5" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-eth0" Feb 9 09:48:15.574480 env[1730]: 2024-02-09 09:48:15.549 [INFO][5637] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" Namespace="calico-apiserver" Pod="calico-apiserver-546697695f-gk2t5" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-eth0" Feb 9 09:48:15.574480 env[1730]: 2024-02-09 09:48:15.549 [INFO][5637] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" Namespace="calico-apiserver" Pod="calico-apiserver-546697695f-gk2t5" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-eth0", GenerateName:"calico-apiserver-546697695f-", Namespace:"calico-apiserver", SelfLink:"", UID:"8dce8da2-8eeb-4629-9778-00c2fd7650a7", ResourceVersion:"1097", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 9, 48, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"546697695f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-17-0", ContainerID:"61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484", Pod:"calico-apiserver-546697695f-gk2t5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.83.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib7460abce3c", MAC:"1e:a1:1d:91:e5:0a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 09:48:15.574480 env[1730]: 2024-02-09 09:48:15.563 [INFO][5637] k8s.go 491: Wrote updated endpoint to datastore ContainerID="61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484" Namespace="calico-apiserver" Pod="calico-apiserver-546697695f-gk2t5" WorkloadEndpoint="ip--172--31--17--0-k8s-calico--apiserver--546697695f--gk2t5-eth0" Feb 9 09:48:15.627930 env[1730]: time="2024-02-09T09:48:15.626570964Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 09:48:15.627930 env[1730]: time="2024-02-09T09:48:15.626755145Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 09:48:15.627930 env[1730]: time="2024-02-09T09:48:15.626840323Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 09:48:15.627930 env[1730]: time="2024-02-09T09:48:15.627383876Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484 pid=5681 runtime=io.containerd.runc.v2 Feb 9 09:48:15.702259 systemd[1]: Started cri-containerd-61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484.scope. Feb 9 09:48:15.725542 systemd[1]: run-containerd-runc-k8s.io-61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484-runc.vw7Xcv.mount: Deactivated successfully. Feb 9 09:48:15.759000 audit[5659]: USER_ACCT pid=5659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:15.762519 sshd[5659]: Accepted publickey for core from 139.178.89.65 port 56690 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:15.764254 sshd[5659]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:15.761000 audit[5659]: CRED_ACQ pid=5659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:15.761000 audit[5659]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0e487e0 a2=3 a3=1 items=0 ppid=1 pid=5659 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:15.761000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:15.773421 systemd-logind[1716]: New session 19 of user core. Feb 9 09:48:15.775795 systemd[1]: Started session-19.scope. Feb 9 09:48:15.789000 audit[5659]: USER_START pid=5659 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:15.792000 audit[5715]: CRED_ACQ pid=5715 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:15.795000 audit[5714]: NETFILTER_CFG table=filter:121 family=2 entries=55 op=nft_register_chain pid=5714 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 09:48:15.795000 audit[5714]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28088 a0=3 a1=ffffc0e7feb0 a2=0 a3=ffff8b5bafa8 items=0 ppid=4381 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:15.795000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 09:48:15.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.799000 audit: BPF prog-id=203 op=LOAD Feb 9 09:48:15.801000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.801000 audit[5692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=5681 pid=5692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:15.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631623937666262316462323139323233366364613239326331373964 Feb 9 09:48:15.801000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.801000 audit[5692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5681 pid=5692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:15.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631623937666262316462323139323233366364613239326331373964 Feb 9 09:48:15.802000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.802000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.802000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.802000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.802000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.802000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.802000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.802000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.802000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.802000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.802000 audit: BPF prog-id=204 op=LOAD Feb 9 09:48:15.802000 audit[5692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5681 pid=5692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:15.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631623937666262316462323139323233366364613239326331373964 Feb 9 09:48:15.803000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.803000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.803000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.803000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.803000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.803000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.803000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.803000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.803000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.803000 audit: BPF prog-id=205 op=LOAD Feb 9 09:48:15.803000 audit[5692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5681 pid=5692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:15.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631623937666262316462323139323233366364613239326331373964 Feb 9 09:48:15.805000 audit: BPF prog-id=205 op=UNLOAD Feb 9 09:48:15.805000 audit: BPF prog-id=204 op=UNLOAD Feb 9 09:48:15.806000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.806000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.806000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.806000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.806000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.806000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.806000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.806000 audit[5692]: AVC avc: denied { perfmon } for pid=5692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.806000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.806000 audit[5692]: AVC avc: denied { bpf } for pid=5692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:15.806000 audit: BPF prog-id=206 op=LOAD Feb 9 09:48:15.806000 audit[5692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5681 pid=5692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:15.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631623937666262316462323139323233366364613239326331373964 Feb 9 09:48:15.853625 env[1730]: time="2024-02-09T09:48:15.853568467Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-546697695f-gk2t5,Uid:8dce8da2-8eeb-4629-9778-00c2fd7650a7,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484\"" Feb 9 09:48:15.857326 env[1730]: time="2024-02-09T09:48:15.857241348Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\"" Feb 9 09:48:17.285000 audit[5736]: NETFILTER_CFG table=filter:122 family=2 entries=22 op=nft_register_rule pid=5736 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:17.285000 audit[5736]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=ffffca2183f0 a2=0 a3=ffffbf4de6c0 items=0 ppid=3176 pid=5736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:17.285000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:17.289000 audit[5736]: NETFILTER_CFG table=nat:123 family=2 entries=20 op=nft_register_rule pid=5736 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:17.289000 audit[5736]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffca2183f0 a2=0 a3=ffffbf4de6c0 items=0 ppid=3176 pid=5736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:17.289000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:17.303388 sshd[5659]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:17.305000 audit[5659]: USER_END pid=5659 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:17.306000 audit[5659]: CRED_DISP pid=5659 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:17.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.17.0:22-139.178.89.65:56690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:17.310927 systemd[1]: sshd@18-172.31.17.0:22-139.178.89.65:56690.service: Deactivated successfully. Feb 9 09:48:17.312314 systemd[1]: session-19.scope: Deactivated successfully. Feb 9 09:48:17.314430 systemd-logind[1716]: Session 19 logged out. Waiting for processes to exit. Feb 9 09:48:17.317881 systemd-logind[1716]: Removed session 19. Feb 9 09:48:17.335173 systemd[1]: Started sshd@19-172.31.17.0:22-139.178.89.65:56692.service. Feb 9 09:48:17.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.17.0:22-139.178.89.65:56692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:17.392000 audit[5740]: NETFILTER_CFG table=filter:124 family=2 entries=34 op=nft_register_rule pid=5740 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:17.392000 audit[5740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=ffffdc2c0840 a2=0 a3=ffffba5b86c0 items=0 ppid=3176 pid=5740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:17.392000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:17.395000 audit[5740]: NETFILTER_CFG table=nat:125 family=2 entries=20 op=nft_register_rule pid=5740 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:17.395000 audit[5740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffdc2c0840 a2=0 a3=ffffba5b86c0 items=0 ppid=3176 pid=5740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:17.395000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:17.497961 systemd-networkd[1537]: calib7460abce3c: Gained IPv6LL Feb 9 09:48:17.537000 audit[5741]: USER_ACCT pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:17.539374 sshd[5741]: Accepted publickey for core from 139.178.89.65 port 56692 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:17.539000 audit[5741]: CRED_ACQ pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:17.540000 audit[5741]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe95ddb30 a2=3 a3=1 items=0 ppid=1 pid=5741 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:17.540000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:17.542654 sshd[5741]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:17.550870 systemd-logind[1716]: New session 20 of user core. Feb 9 09:48:17.551860 systemd[1]: Started session-20.scope. Feb 9 09:48:17.561000 audit[5741]: USER_START pid=5741 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:17.564000 audit[5743]: CRED_ACQ pid=5743 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:18.667573 sshd[5741]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:18.668000 audit[5741]: USER_END pid=5741 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:18.668000 audit[5741]: CRED_DISP pid=5741 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:18.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.17.0:22-139.178.89.65:56692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:18.672832 systemd[1]: sshd@19-172.31.17.0:22-139.178.89.65:56692.service: Deactivated successfully. Feb 9 09:48:18.674200 systemd[1]: session-20.scope: Deactivated successfully. Feb 9 09:48:18.677345 systemd-logind[1716]: Session 20 logged out. Waiting for processes to exit. Feb 9 09:48:18.682510 systemd-logind[1716]: Removed session 20. Feb 9 09:48:18.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.17.0:22-139.178.89.65:58142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:18.695034 systemd[1]: Started sshd@20-172.31.17.0:22-139.178.89.65:58142.service. Feb 9 09:48:18.913000 audit[5766]: USER_ACCT pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:18.915199 sshd[5766]: Accepted publickey for core from 139.178.89.65 port 58142 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:18.917000 audit[5766]: CRED_ACQ pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:18.917000 audit[5766]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1c36380 a2=3 a3=1 items=0 ppid=1 pid=5766 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:18.917000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:18.921430 sshd[5766]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:18.932341 systemd[1]: Started session-21.scope. Feb 9 09:48:18.933950 systemd-logind[1716]: New session 21 of user core. Feb 9 09:48:18.959000 audit[5766]: USER_START pid=5766 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:18.962000 audit[5768]: CRED_ACQ pid=5768 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:19.312979 sshd[5766]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:19.320507 kernel: kauditd_printk_skb: 126 callbacks suppressed Feb 9 09:48:19.320650 kernel: audit: type=1106 audit(1707472099.313:1570): pid=5766 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:19.313000 audit[5766]: USER_END pid=5766 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:19.318379 systemd[1]: sshd@20-172.31.17.0:22-139.178.89.65:58142.service: Deactivated successfully. Feb 9 09:48:19.319693 systemd[1]: session-21.scope: Deactivated successfully. Feb 9 09:48:19.329264 systemd-logind[1716]: Session 21 logged out. Waiting for processes to exit. Feb 9 09:48:19.331211 systemd-logind[1716]: Removed session 21. Feb 9 09:48:19.313000 audit[5766]: CRED_DISP pid=5766 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:19.342656 kernel: audit: type=1104 audit(1707472099.313:1571): pid=5766 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:19.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.17.0:22-139.178.89.65:58142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:19.353046 kernel: audit: type=1131 audit(1707472099.315:1572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.17.0:22-139.178.89.65:58142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:20.065081 env[1730]: time="2024-02-09T09:48:20.065025889Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:48:20.069238 env[1730]: time="2024-02-09T09:48:20.069172624Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24494ef6c7de0e2dcf21ad9fb6c94801c53f120443e256a5e1b54eccd57058a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:48:20.072142 env[1730]: time="2024-02-09T09:48:20.072080906Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:48:20.075176 env[1730]: time="2024-02-09T09:48:20.075128429Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:5ff0bdc8d0b2e9d7819703b18867f60f9153ed01da81e2bbfa22002abec9dc26,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 09:48:20.076311 env[1730]: time="2024-02-09T09:48:20.076264470Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\" returns image reference \"sha256:24494ef6c7de0e2dcf21ad9fb6c94801c53f120443e256a5e1b54eccd57058a9\"" Feb 9 09:48:20.082007 env[1730]: time="2024-02-09T09:48:20.081944278Z" level=info msg="CreateContainer within sandbox \"61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Feb 9 09:48:20.107357 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3185673601.mount: Deactivated successfully. Feb 9 09:48:20.114439 env[1730]: time="2024-02-09T09:48:20.114339402Z" level=info msg="CreateContainer within sandbox \"61b97fbb1db2192236cda292c179d620f5dfab36cbb4fdcb1ad61485c29ab484\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"178d07beaa1b2d64561ab9ee4fc91ada1d5b5574ade7e16b27887261912ccaca\"" Feb 9 09:48:20.117535 env[1730]: time="2024-02-09T09:48:20.115767376Z" level=info msg="StartContainer for \"178d07beaa1b2d64561ab9ee4fc91ada1d5b5574ade7e16b27887261912ccaca\"" Feb 9 09:48:20.171666 systemd[1]: run-containerd-runc-k8s.io-178d07beaa1b2d64561ab9ee4fc91ada1d5b5574ade7e16b27887261912ccaca-runc.PxV0rv.mount: Deactivated successfully. Feb 9 09:48:20.180957 systemd[1]: Started cri-containerd-178d07beaa1b2d64561ab9ee4fc91ada1d5b5574ade7e16b27887261912ccaca.scope. Feb 9 09:48:20.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.239619 kernel: audit: type=1400 audit(1707472100.222:1573): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.239773 kernel: audit: type=1400 audit(1707472100.222:1574): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.248756 kernel: audit: type=1400 audit(1707472100.222:1575): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.256740 kernel: audit: type=1400 audit(1707472100.222:1576): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.264715 kernel: audit: type=1400 audit(1707472100.222:1577): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.280889 kernel: audit: type=1400 audit(1707472100.222:1578): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.280999 kernel: audit: type=1400 audit(1707472100.222:1579): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.231000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.231000 audit: BPF prog-id=207 op=LOAD Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=5681 pid=5786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:20.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137386430376265616131623264363435363161623965653466633931 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5681 pid=5786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:20.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137386430376265616131623264363435363161623965653466633931 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit: BPF prog-id=208 op=LOAD Feb 9 09:48:20.238000 audit[5786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5681 pid=5786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:20.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137386430376265616131623264363435363161623965653466633931 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit: BPF prog-id=209 op=LOAD Feb 9 09:48:20.238000 audit[5786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5681 pid=5786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:20.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137386430376265616131623264363435363161623965653466633931 Feb 9 09:48:20.238000 audit: BPF prog-id=209 op=UNLOAD Feb 9 09:48:20.238000 audit: BPF prog-id=208 op=UNLOAD Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { perfmon } for pid=5786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit[5786]: AVC avc: denied { bpf } for pid=5786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:48:20.238000 audit: BPF prog-id=210 op=LOAD Feb 9 09:48:20.238000 audit[5786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5681 pid=5786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:20.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137386430376265616131623264363435363161623965653466633931 Feb 9 09:48:20.319066 env[1730]: time="2024-02-09T09:48:20.315467840Z" level=info msg="StartContainer for \"178d07beaa1b2d64561ab9ee4fc91ada1d5b5574ade7e16b27887261912ccaca\" returns successfully" Feb 9 09:48:20.481000 audit[5816]: NETFILTER_CFG table=filter:126 family=2 entries=34 op=nft_register_rule pid=5816 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:20.481000 audit[5816]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=ffffd548ef90 a2=0 a3=ffffa1d886c0 items=0 ppid=3176 pid=5816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:20.481000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:20.483000 audit[5816]: NETFILTER_CFG table=nat:127 family=2 entries=20 op=nft_register_rule pid=5816 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:20.483000 audit[5816]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffd548ef90 a2=0 a3=ffffa1d886c0 items=0 ppid=3176 pid=5816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:20.483000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:21.051656 kubelet[2782]: I0209 09:48:21.051611 2782 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-546697695f-gk2t5" podStartSLOduration=2.8311889580000003 podCreationTimestamp="2024-02-09 09:48:14 +0000 UTC" firstStartedPulling="2024-02-09 09:48:15.856458917 +0000 UTC m=+95.213112265" lastFinishedPulling="2024-02-09 09:48:20.076823724 +0000 UTC m=+99.433477072" observedRunningTime="2024-02-09 09:48:21.048777915 +0000 UTC m=+100.405431311" watchObservedRunningTime="2024-02-09 09:48:21.051553765 +0000 UTC m=+100.408207125" Feb 9 09:48:21.091000 audit[5820]: NETFILTER_CFG table=filter:128 family=2 entries=34 op=nft_register_rule pid=5820 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:21.091000 audit[5820]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=ffffd49a3070 a2=0 a3=ffff856e66c0 items=0 ppid=3176 pid=5820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:21.091000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:21.093000 audit[5820]: NETFILTER_CFG table=nat:129 family=2 entries=20 op=nft_register_rule pid=5820 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:21.093000 audit[5820]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffd49a3070 a2=0 a3=ffff856e66c0 items=0 ppid=3176 pid=5820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:21.093000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:22.491000 audit[5796]: AVC avc: denied { watch } for pid=5796 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_09_48_14.271385623/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c777 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c161,c777 tclass=file permissive=0 Feb 9 09:48:22.491000 audit[5796]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40004a7400 a2=fc6 a3=0 items=0 ppid=5681 pid=5796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c777 key=(null) Feb 9 09:48:22.491000 audit: PROCTITLE proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 9 09:48:23.483775 systemd[1]: run-containerd-runc-k8s.io-e8408174a709b277a22f479e57d46663c07ccde318d9d8063697d4809712d0d6-runc.AnmFFq.mount: Deactivated successfully. Feb 9 09:48:24.341575 systemd[1]: Started sshd@21-172.31.17.0:22-139.178.89.65:58144.service. Feb 9 09:48:24.344014 kernel: kauditd_printk_skb: 65 callbacks suppressed Feb 9 09:48:24.344086 kernel: audit: type=1130 audit(1707472104.341:1596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.17.0:22-139.178.89.65:58144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:24.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.17.0:22-139.178.89.65:58144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:24.525000 audit[5842]: USER_ACCT pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:24.526957 sshd[5842]: Accepted publickey for core from 139.178.89.65 port 58144 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:24.536751 kernel: audit: type=1101 audit(1707472104.525:1597): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:24.538000 audit[5842]: CRED_ACQ pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:24.549186 sshd[5842]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:24.555286 kernel: audit: type=1103 audit(1707472104.538:1598): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:24.555465 kernel: audit: type=1006 audit(1707472104.538:1599): pid=5842 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Feb 9 09:48:24.538000 audit[5842]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbc554c0 a2=3 a3=1 items=0 ppid=1 pid=5842 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:24.566018 kernel: audit: type=1300 audit(1707472104.538:1599): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbc554c0 a2=3 a3=1 items=0 ppid=1 pid=5842 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:24.538000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:24.570123 kernel: audit: type=1327 audit(1707472104.538:1599): proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:24.575770 systemd-logind[1716]: New session 22 of user core. Feb 9 09:48:24.577638 systemd[1]: Started session-22.scope. Feb 9 09:48:24.587000 audit[5842]: USER_START pid=5842 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:24.601142 kernel: audit: type=1105 audit(1707472104.587:1600): pid=5842 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:24.601254 kernel: audit: type=1103 audit(1707472104.599:1601): pid=5844 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:24.599000 audit[5844]: CRED_ACQ pid=5844 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:24.857105 sshd[5842]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:24.858000 audit[5842]: USER_END pid=5842 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:24.871370 systemd[1]: sshd@21-172.31.17.0:22-139.178.89.65:58144.service: Deactivated successfully. Feb 9 09:48:24.860000 audit[5842]: CRED_DISP pid=5842 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:24.871827 kernel: audit: type=1106 audit(1707472104.858:1602): pid=5842 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:24.872782 systemd[1]: session-22.scope: Deactivated successfully. Feb 9 09:48:24.871000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.17.0:22-139.178.89.65:58144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:24.883340 kernel: audit: type=1104 audit(1707472104.860:1603): pid=5842 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:24.882625 systemd-logind[1716]: Session 22 logged out. Waiting for processes to exit. Feb 9 09:48:24.884453 systemd-logind[1716]: Removed session 22. Feb 9 09:48:27.642000 audit[5858]: NETFILTER_CFG table=filter:130 family=2 entries=22 op=nft_register_rule pid=5858 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:27.642000 audit[5858]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=fffffcd3b2b0 a2=0 a3=ffff8cba66c0 items=0 ppid=3176 pid=5858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:27.642000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:27.649000 audit[5858]: NETFILTER_CFG table=nat:131 family=2 entries=104 op=nft_register_chain pid=5858 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:27.649000 audit[5858]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=47436 a0=3 a1=fffffcd3b2b0 a2=0 a3=ffff8cba66c0 items=0 ppid=3176 pid=5858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:27.649000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:29.888728 systemd[1]: Started sshd@22-172.31.17.0:22-139.178.89.65:40712.service. Feb 9 09:48:29.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.17.0:22-139.178.89.65:40712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:29.891774 kernel: kauditd_printk_skb: 7 callbacks suppressed Feb 9 09:48:29.891853 kernel: audit: type=1130 audit(1707472109.889:1607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.17.0:22-139.178.89.65:40712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:30.073000 audit[5861]: USER_ACCT pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:30.074903 sshd[5861]: Accepted publickey for core from 139.178.89.65 port 40712 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:30.079549 sshd[5861]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:30.078000 audit[5861]: CRED_ACQ pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:30.090205 systemd[1]: Started session-23.scope. Feb 9 09:48:30.093019 systemd-logind[1716]: New session 23 of user core. Feb 9 09:48:30.094232 kernel: audit: type=1101 audit(1707472110.073:1608): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:30.094285 kernel: audit: type=1103 audit(1707472110.078:1609): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:30.094328 kernel: audit: type=1006 audit(1707472110.078:1610): pid=5861 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Feb 9 09:48:30.078000 audit[5861]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4b22990 a2=3 a3=1 items=0 ppid=1 pid=5861 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:30.110138 kernel: audit: type=1300 audit(1707472110.078:1610): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4b22990 a2=3 a3=1 items=0 ppid=1 pid=5861 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:30.078000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:30.114274 kernel: audit: type=1327 audit(1707472110.078:1610): proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:30.105000 audit[5861]: USER_START pid=5861 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:30.125698 kernel: audit: type=1105 audit(1707472110.105:1611): pid=5861 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:30.114000 audit[5863]: CRED_ACQ pid=5863 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:30.134793 kernel: audit: type=1103 audit(1707472110.114:1612): pid=5863 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:30.351605 sshd[5861]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:30.353000 audit[5861]: USER_END pid=5861 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:30.356935 systemd[1]: session-23.scope: Deactivated successfully. Feb 9 09:48:30.358293 systemd[1]: sshd@22-172.31.17.0:22-139.178.89.65:40712.service: Deactivated successfully. Feb 9 09:48:30.354000 audit[5861]: CRED_DISP pid=5861 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:30.375079 kernel: audit: type=1106 audit(1707472110.353:1613): pid=5861 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:30.375170 kernel: audit: type=1104 audit(1707472110.354:1614): pid=5861 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:30.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.17.0:22-139.178.89.65:40712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:30.375554 systemd-logind[1716]: Session 23 logged out. Waiting for processes to exit. Feb 9 09:48:30.377357 systemd-logind[1716]: Removed session 23. Feb 9 09:48:35.384187 systemd[1]: Started sshd@23-172.31.17.0:22-139.178.89.65:40718.service. Feb 9 09:48:35.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.17.0:22-139.178.89.65:40718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:35.387723 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 09:48:35.387878 kernel: audit: type=1130 audit(1707472115.384:1616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.17.0:22-139.178.89.65:40718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:35.566000 audit[5875]: USER_ACCT pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:35.567789 sshd[5875]: Accepted publickey for core from 139.178.89.65 port 40718 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:35.578000 audit[5875]: CRED_ACQ pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:35.580556 sshd[5875]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:35.588665 kernel: audit: type=1101 audit(1707472115.566:1617): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:35.588802 kernel: audit: type=1103 audit(1707472115.578:1618): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:35.596277 kernel: audit: type=1006 audit(1707472115.578:1619): pid=5875 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Feb 9 09:48:35.578000 audit[5875]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccf4d210 a2=3 a3=1 items=0 ppid=1 pid=5875 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:35.578000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:35.614353 kernel: audit: type=1300 audit(1707472115.578:1619): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccf4d210 a2=3 a3=1 items=0 ppid=1 pid=5875 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:35.614489 kernel: audit: type=1327 audit(1707472115.578:1619): proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:35.614574 kernel: audit: type=1400 audit(1707472115.598:1620): avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:35.598000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:35.615921 systemd-logind[1716]: New session 24 of user core. Feb 9 09:48:35.598000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000cae500 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:48:35.625882 systemd[1]: Started session-24.scope. Feb 9 09:48:35.636329 kernel: audit: type=1300 audit(1707472115.598:1620): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000cae500 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:48:35.598000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:48:35.647938 kernel: audit: type=1327 audit(1707472115.598:1620): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:48:35.609000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:35.659709 kernel: audit: type=1400 audit(1707472115.609:1621): avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:35.609000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011e8ed0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:48:35.609000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:48:35.648000 audit[5875]: USER_START pid=5875 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:35.649000 audit[5878]: CRED_ACQ pid=5878 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:35.931386 sshd[5875]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:35.934000 audit[5875]: USER_END pid=5875 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:35.934000 audit[5875]: CRED_DISP pid=5875 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:35.938000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.17.0:22-139.178.89.65:40718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:35.938257 systemd[1]: sshd@23-172.31.17.0:22-139.178.89.65:40718.service: Deactivated successfully. Feb 9 09:48:35.939603 systemd[1]: session-24.scope: Deactivated successfully. Feb 9 09:48:35.941926 systemd-logind[1716]: Session 24 logged out. Waiting for processes to exit. Feb 9 09:48:35.944526 systemd-logind[1716]: Removed session 24. Feb 9 09:48:36.921000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:36.921000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=40085f1b30 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:48:36.921000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:48:36.925000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:36.925000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=40085f1b60 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:48:36.925000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:48:36.928000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:36.928000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=40085f1d70 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:48:36.928000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:48:36.950000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:36.950000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:36.950000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=4007702360 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:48:36.950000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:48:36.950000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=76 a1=40087e6c60 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:48:36.950000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:48:36.951000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:36.951000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=76 a1=40086c09e0 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:48:36.951000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:48:38.931065 systemd[1]: run-containerd-runc-k8s.io-38d808b7dbec68999caf5fd806b8883f3700c223536482e50227ae1ae3f949fb-runc.8Qxrup.mount: Deactivated successfully. Feb 9 09:48:40.963852 systemd[1]: Started sshd@24-172.31.17.0:22-139.178.89.65:40828.service. Feb 9 09:48:40.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.17.0:22-139.178.89.65:40828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:40.968026 kernel: kauditd_printk_skb: 25 callbacks suppressed Feb 9 09:48:40.968185 kernel: audit: type=1130 audit(1707472120.964:1633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.17.0:22-139.178.89.65:40828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:41.142000 audit[5910]: USER_ACCT pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:41.144597 sshd[5910]: Accepted publickey for core from 139.178.89.65 port 40828 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:41.155769 kernel: audit: type=1101 audit(1707472121.142:1634): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:41.154000 audit[5910]: CRED_ACQ pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:41.167284 sshd[5910]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:41.174288 kernel: audit: type=1103 audit(1707472121.154:1635): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:41.174439 kernel: audit: type=1006 audit(1707472121.154:1636): pid=5910 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Feb 9 09:48:41.154000 audit[5910]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcad6ee60 a2=3 a3=1 items=0 ppid=1 pid=5910 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:41.154000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:41.191416 kernel: audit: type=1300 audit(1707472121.154:1636): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcad6ee60 a2=3 a3=1 items=0 ppid=1 pid=5910 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:41.191554 kernel: audit: type=1327 audit(1707472121.154:1636): proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:41.197821 systemd-logind[1716]: New session 25 of user core. Feb 9 09:48:41.199031 systemd[1]: Started session-25.scope. Feb 9 09:48:41.207000 audit[5910]: USER_START pid=5910 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:41.222725 kernel: audit: type=1105 audit(1707472121.207:1637): pid=5910 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:41.221000 audit[5912]: CRED_ACQ pid=5912 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:41.233731 kernel: audit: type=1103 audit(1707472121.221:1638): pid=5912 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:41.472257 sshd[5910]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:41.472000 audit[5910]: USER_END pid=5910 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:41.478470 systemd-logind[1716]: Session 25 logged out. Waiting for processes to exit. Feb 9 09:48:41.479755 systemd[1]: session-25.scope: Deactivated successfully. Feb 9 09:48:41.480839 systemd[1]: sshd@24-172.31.17.0:22-139.178.89.65:40828.service: Deactivated successfully. Feb 9 09:48:41.483616 systemd-logind[1716]: Removed session 25. Feb 9 09:48:41.472000 audit[5910]: CRED_DISP pid=5910 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:41.494699 kernel: audit: type=1106 audit(1707472121.472:1639): pid=5910 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:41.494860 kernel: audit: type=1104 audit(1707472121.472:1640): pid=5910 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:41.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.17.0:22-139.178.89.65:40828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:45.289000 audit[5942]: NETFILTER_CFG table=filter:132 family=2 entries=9 op=nft_register_rule pid=5942 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:45.289000 audit[5942]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffcc1f1530 a2=0 a3=ffffa17b66c0 items=0 ppid=3176 pid=5942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:45.289000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:45.294000 audit[5942]: NETFILTER_CFG table=nat:133 family=2 entries=51 op=nft_register_chain pid=5942 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:45.294000 audit[5942]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=17716 a0=3 a1=ffffcc1f1530 a2=0 a3=ffffa17b66c0 items=0 ppid=3176 pid=5942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:45.294000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:45.533000 audit[5944]: NETFILTER_CFG table=filter:134 family=2 entries=8 op=nft_register_rule pid=5944 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:45.533000 audit[5944]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffce3a6cd0 a2=0 a3=ffff900046c0 items=0 ppid=3176 pid=5944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:45.533000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:45.539000 audit[5944]: NETFILTER_CFG table=nat:135 family=2 entries=58 op=nft_register_chain pid=5944 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 09:48:45.539000 audit[5944]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19604 a0=3 a1=ffffce3a6cd0 a2=0 a3=ffff900046c0 items=0 ppid=3176 pid=5944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:45.539000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 09:48:46.503407 systemd[1]: Started sshd@25-172.31.17.0:22-139.178.89.65:40836.service. Feb 9 09:48:46.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.17.0:22-139.178.89.65:40836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:46.506854 kernel: kauditd_printk_skb: 13 callbacks suppressed Feb 9 09:48:46.506994 kernel: audit: type=1130 audit(1707472126.503:1646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.17.0:22-139.178.89.65:40836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:46.701000 audit[5948]: USER_ACCT pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:46.702811 sshd[5948]: Accepted publickey for core from 139.178.89.65 port 40836 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:46.712754 kernel: audit: type=1101 audit(1707472126.701:1647): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:46.713000 audit[5948]: CRED_ACQ pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:46.715306 sshd[5948]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:46.729706 kernel: audit: type=1103 audit(1707472126.713:1648): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:46.729880 kernel: audit: type=1006 audit(1707472126.713:1649): pid=5948 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Feb 9 09:48:46.713000 audit[5948]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffddd72ab0 a2=3 a3=1 items=0 ppid=1 pid=5948 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:46.740052 kernel: audit: type=1300 audit(1707472126.713:1649): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffddd72ab0 a2=3 a3=1 items=0 ppid=1 pid=5948 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:46.744269 kernel: audit: type=1327 audit(1707472126.713:1649): proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:46.713000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:46.746622 systemd-logind[1716]: New session 26 of user core. Feb 9 09:48:46.747933 systemd[1]: Started session-26.scope. Feb 9 09:48:46.759000 audit[5948]: USER_START pid=5948 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:46.760000 audit[5950]: CRED_ACQ pid=5950 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:46.780717 kernel: audit: type=1105 audit(1707472126.759:1650): pid=5948 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:46.780851 kernel: audit: type=1103 audit(1707472126.760:1651): pid=5950 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:47.005257 sshd[5948]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:47.006000 audit[5948]: USER_END pid=5948 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:47.006000 audit[5948]: CRED_DISP pid=5948 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:47.021445 systemd-logind[1716]: Session 26 logged out. Waiting for processes to exit. Feb 9 09:48:47.023832 systemd[1]: sshd@25-172.31.17.0:22-139.178.89.65:40836.service: Deactivated successfully. Feb 9 09:48:47.025113 systemd[1]: session-26.scope: Deactivated successfully. Feb 9 09:48:47.027598 systemd-logind[1716]: Removed session 26. Feb 9 09:48:47.028003 kernel: audit: type=1106 audit(1707472127.006:1652): pid=5948 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:47.028085 kernel: audit: type=1104 audit(1707472127.006:1653): pid=5948 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:47.023000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.17.0:22-139.178.89.65:40836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:50.233000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:50.233000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001248180 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:48:50.233000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:48:50.240000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:50.240000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012481c0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:48:50.240000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:48:50.244000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:50.244000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001248200 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:48:50.244000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:48:50.248000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:48:50.248000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001248240 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:48:50.248000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:48:52.037701 systemd[1]: Started sshd@26-172.31.17.0:22-139.178.89.65:34888.service. Feb 9 09:48:52.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.17.0:22-139.178.89.65:34888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:52.042689 kernel: kauditd_printk_skb: 13 callbacks suppressed Feb 9 09:48:52.042849 kernel: audit: type=1130 audit(1707472132.037:1659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.17.0:22-139.178.89.65:34888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:52.221000 audit[5980]: USER_ACCT pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:52.232315 sshd[5980]: Accepted publickey for core from 139.178.89.65 port 34888 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:52.231000 audit[5980]: CRED_ACQ pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:52.242508 kernel: audit: type=1101 audit(1707472132.221:1660): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:52.242656 kernel: audit: type=1103 audit(1707472132.231:1661): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:52.232953 sshd[5980]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:52.253467 kernel: audit: type=1006 audit(1707472132.231:1662): pid=5980 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Feb 9 09:48:52.249553 systemd[1]: Started session-27.scope. Feb 9 09:48:52.252367 systemd-logind[1716]: New session 27 of user core. Feb 9 09:48:52.231000 audit[5980]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeeb14d70 a2=3 a3=1 items=0 ppid=1 pid=5980 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:52.270591 kernel: audit: type=1300 audit(1707472132.231:1662): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeeb14d70 a2=3 a3=1 items=0 ppid=1 pid=5980 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:52.231000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:52.274898 kernel: audit: type=1327 audit(1707472132.231:1662): proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:52.258000 audit[5980]: USER_START pid=5980 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:52.287103 kernel: audit: type=1105 audit(1707472132.258:1663): pid=5980 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:52.287356 kernel: audit: type=1103 audit(1707472132.274:1664): pid=5983 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:52.274000 audit[5983]: CRED_ACQ pid=5983 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:52.527873 sshd[5980]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:52.529000 audit[5980]: USER_END pid=5980 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:52.529000 audit[5980]: CRED_DISP pid=5980 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:52.544111 systemd[1]: sshd@26-172.31.17.0:22-139.178.89.65:34888.service: Deactivated successfully. Feb 9 09:48:52.545383 systemd[1]: session-27.scope: Deactivated successfully. Feb 9 09:48:52.548702 systemd-logind[1716]: Session 27 logged out. Waiting for processes to exit. Feb 9 09:48:52.550661 systemd-logind[1716]: Removed session 27. Feb 9 09:48:52.553720 kernel: audit: type=1106 audit(1707472132.529:1665): pid=5980 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:52.553874 kernel: audit: type=1104 audit(1707472132.529:1666): pid=5980 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:52.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.17.0:22-139.178.89.65:34888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:57.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.17.0:22-139.178.89.65:34890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:57.562249 systemd[1]: Started sshd@27-172.31.17.0:22-139.178.89.65:34890.service. Feb 9 09:48:57.564702 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 09:48:57.564784 kernel: audit: type=1130 audit(1707472137.560:1668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.17.0:22-139.178.89.65:34890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:57.752000 audit[6004]: USER_ACCT pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:57.756579 sshd[6004]: Accepted publickey for core from 139.178.89.65 port 34890 ssh2: RSA SHA256:1++YWC0h0fEpfkRPeemtMi9ARVJF0YKl/HjB0qv5R1M Feb 9 09:48:57.759953 sshd[6004]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 09:48:57.752000 audit[6004]: CRED_ACQ pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:57.770026 systemd[1]: Started session-28.scope. Feb 9 09:48:57.772803 systemd-logind[1716]: New session 28 of user core. Feb 9 09:48:57.774031 kernel: audit: type=1101 audit(1707472137.752:1669): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:57.774101 kernel: audit: type=1103 audit(1707472137.752:1670): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:57.774155 kernel: audit: type=1006 audit(1707472137.752:1671): pid=6004 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Feb 9 09:48:57.752000 audit[6004]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4baf0c0 a2=3 a3=1 items=0 ppid=1 pid=6004 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:57.789816 kernel: audit: type=1300 audit(1707472137.752:1671): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4baf0c0 a2=3 a3=1 items=0 ppid=1 pid=6004 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:48:57.752000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:57.793865 kernel: audit: type=1327 audit(1707472137.752:1671): proctitle=737368643A20636F7265205B707269765D Feb 9 09:48:57.788000 audit[6004]: USER_START pid=6004 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:57.805812 kernel: audit: type=1105 audit(1707472137.788:1672): pid=6004 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:57.804000 audit[6007]: CRED_ACQ pid=6007 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:57.815448 kernel: audit: type=1103 audit(1707472137.804:1673): pid=6007 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:58.042033 sshd[6004]: pam_unix(sshd:session): session closed for user core Feb 9 09:48:58.042000 audit[6004]: USER_END pid=6004 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:58.042000 audit[6004]: CRED_DISP pid=6004 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:58.056316 systemd[1]: sshd@27-172.31.17.0:22-139.178.89.65:34890.service: Deactivated successfully. Feb 9 09:48:58.066021 kernel: audit: type=1106 audit(1707472138.042:1674): pid=6004 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:58.066132 kernel: audit: type=1104 audit(1707472138.042:1675): pid=6004 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 9 09:48:58.057631 systemd[1]: session-28.scope: Deactivated successfully. Feb 9 09:48:58.055000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.17.0:22-139.178.89.65:34890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 09:48:58.066661 systemd-logind[1716]: Session 28 logged out. Waiting for processes to exit. Feb 9 09:48:58.068278 systemd-logind[1716]: Removed session 28. Feb 9 09:49:22.492000 audit[5796]: AVC avc: denied { watch } for pid=5796 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_09_48_14.271385623/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c777 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c161,c777 tclass=file permissive=0 Feb 9 09:49:22.495597 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 09:49:22.495755 kernel: audit: type=1400 audit(1707472162.492:1677): avc: denied { watch } for pid=5796 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_09_48_14.271385623/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c777 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c161,c777 tclass=file permissive=0 Feb 9 09:49:22.492000 audit[5796]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a61e40 a2=fc6 a3=0 items=0 ppid=5681 pid=5796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c777 key=(null) Feb 9 09:49:22.517747 kernel: audit: type=1300 audit(1707472162.492:1677): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a61e40 a2=fc6 a3=0 items=0 ppid=5681 pid=5796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c777 key=(null) Feb 9 09:49:22.517843 kernel: audit: type=1327 audit(1707472162.492:1677): proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 9 09:49:22.492000 audit: PROCTITLE proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 9 09:49:23.487207 systemd[1]: run-containerd-runc-k8s.io-e8408174a709b277a22f479e57d46663c07ccde318d9d8063697d4809712d0d6-runc.n6UcMT.mount: Deactivated successfully. Feb 9 09:49:35.603000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:35.603000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400270bf80 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:49:35.626006 kernel: audit: type=1400 audit(1707472175.603:1678): avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:35.626104 kernel: audit: type=1300 audit(1707472175.603:1678): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400270bf80 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:49:35.603000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:49:35.636546 kernel: audit: type=1327 audit(1707472175.603:1678): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:49:35.610000 audit[2624]: AVC avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:35.646501 kernel: audit: type=1400 audit(1707472175.610:1679): avc: denied { watch } for pid=2624 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:35.610000 audit[2624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40021690e0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:49:35.658905 kernel: audit: type=1300 audit(1707472175.610:1679): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40021690e0 a2=fc6 a3=0 items=0 ppid=2468 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:49:35.610000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:49:35.669971 kernel: audit: type=1327 audit(1707472175.610:1679): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:49:36.923000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:36.923000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400b8473e0 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:49:36.946138 kernel: audit: type=1400 audit(1707472176.923:1680): avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:36.946291 kernel: audit: type=1300 audit(1707472176.923:1680): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400b8473e0 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:49:36.946351 kernel: audit: type=1327 audit(1707472176.923:1680): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:49:36.923000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:49:36.923000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:36.966563 kernel: audit: type=1400 audit(1707472176.923:1681): avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:36.923000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400b847410 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:49:36.923000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:49:36.923000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:36.923000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400b8475c0 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:49:36.923000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:49:36.945000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:36.945000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400c8f76b0 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:49:36.945000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:49:36.951000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:36.951000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4011e44d80 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:49:36.951000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:49:36.951000 audit[2584]: AVC avc: denied { watch } for pid=2584 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:36.951000 audit[2584]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4013d32ae0 a2=fc6 a3=0 items=0 ppid=2463 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c771 key=(null) Feb 9 09:49:36.951000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E30002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Feb 9 09:49:38.926131 systemd[1]: run-containerd-runc-k8s.io-38d808b7dbec68999caf5fd806b8883f3700c223536482e50227ae1ae3f949fb-runc.RZabHd.mount: Deactivated successfully. Feb 9 09:49:44.531307 systemd[1]: cri-containerd-814fcc84ff24f072dbe6931f41a76f05ded4567fb1a5ae1863d44ee37eedab08.scope: Deactivated successfully. Feb 9 09:49:44.531874 systemd[1]: cri-containerd-814fcc84ff24f072dbe6931f41a76f05ded4567fb1a5ae1863d44ee37eedab08.scope: Consumed 4.652s CPU time. Feb 9 09:49:44.534000 audit: BPF prog-id=89 op=UNLOAD Feb 9 09:49:44.537220 kernel: kauditd_printk_skb: 14 callbacks suppressed Feb 9 09:49:44.537386 kernel: audit: type=1334 audit(1707472184.534:1686): prog-id=89 op=UNLOAD Feb 9 09:49:44.534000 audit: BPF prog-id=100 op=UNLOAD Feb 9 09:49:44.544140 kernel: audit: type=1334 audit(1707472184.534:1687): prog-id=100 op=UNLOAD Feb 9 09:49:44.581732 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-814fcc84ff24f072dbe6931f41a76f05ded4567fb1a5ae1863d44ee37eedab08-rootfs.mount: Deactivated successfully. Feb 9 09:49:44.586301 env[1730]: time="2024-02-09T09:49:44.586226843Z" level=info msg="shim disconnected" id=814fcc84ff24f072dbe6931f41a76f05ded4567fb1a5ae1863d44ee37eedab08 Feb 9 09:49:44.586918 env[1730]: time="2024-02-09T09:49:44.586303695Z" level=warning msg="cleaning up after shim disconnected" id=814fcc84ff24f072dbe6931f41a76f05ded4567fb1a5ae1863d44ee37eedab08 namespace=k8s.io Feb 9 09:49:44.586918 env[1730]: time="2024-02-09T09:49:44.586330765Z" level=info msg="cleaning up dead shim" Feb 9 09:49:44.601618 env[1730]: time="2024-02-09T09:49:44.601523165Z" level=warning msg="cleanup warnings time=\"2024-02-09T09:49:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6144 runtime=io.containerd.runc.v2\n" Feb 9 09:49:45.129802 kubelet[2782]: E0209 09:49:45.129752 2782 controller.go:193] "Failed to update lease" err="Put \"https://172.31.17.0:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-0?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Feb 9 09:49:45.145658 systemd[1]: cri-containerd-d10f63d269253593faa4222230b54d1136938b4aede7fdd2dd12b08df09190fb.scope: Deactivated successfully. Feb 9 09:49:45.146266 systemd[1]: cri-containerd-d10f63d269253593faa4222230b54d1136938b4aede7fdd2dd12b08df09190fb.scope: Consumed 12.410s CPU time. Feb 9 09:49:45.145000 audit: BPF prog-id=126 op=UNLOAD Feb 9 09:49:45.150782 kernel: audit: type=1334 audit(1707472185.145:1688): prog-id=126 op=UNLOAD Feb 9 09:49:45.152000 audit: BPF prog-id=129 op=UNLOAD Feb 9 09:49:45.156936 kernel: audit: type=1334 audit(1707472185.152:1689): prog-id=129 op=UNLOAD Feb 9 09:49:45.206173 systemd[1]: run-containerd-runc-k8s.io-178d07beaa1b2d64561ab9ee4fc91ada1d5b5574ade7e16b27887261912ccaca-runc.FoLzVE.mount: Deactivated successfully. Feb 9 09:49:45.218597 env[1730]: time="2024-02-09T09:49:45.218519196Z" level=info msg="shim disconnected" id=d10f63d269253593faa4222230b54d1136938b4aede7fdd2dd12b08df09190fb Feb 9 09:49:45.218850 env[1730]: time="2024-02-09T09:49:45.218593613Z" level=warning msg="cleaning up after shim disconnected" id=d10f63d269253593faa4222230b54d1136938b4aede7fdd2dd12b08df09190fb namespace=k8s.io Feb 9 09:49:45.218850 env[1730]: time="2024-02-09T09:49:45.218617670Z" level=info msg="cleaning up dead shim" Feb 9 09:49:45.220073 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d10f63d269253593faa4222230b54d1136938b4aede7fdd2dd12b08df09190fb-rootfs.mount: Deactivated successfully. Feb 9 09:49:45.246930 env[1730]: time="2024-02-09T09:49:45.246874704Z" level=warning msg="cleanup warnings time=\"2024-02-09T09:49:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6178 runtime=io.containerd.runc.v2\n" Feb 9 09:49:45.263854 kubelet[2782]: I0209 09:49:45.263811 2782 scope.go:117] "RemoveContainer" containerID="814fcc84ff24f072dbe6931f41a76f05ded4567fb1a5ae1863d44ee37eedab08" Feb 9 09:49:45.269826 env[1730]: time="2024-02-09T09:49:45.269759035Z" level=info msg="CreateContainer within sandbox \"07d79def4d72e1cf665fa4b3c167792236870ddb2964e8d5fb66426b995516a5\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Feb 9 09:49:45.298714 env[1730]: time="2024-02-09T09:49:45.298622164Z" level=info msg="CreateContainer within sandbox \"07d79def4d72e1cf665fa4b3c167792236870ddb2964e8d5fb66426b995516a5\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"d40d7198ac223d7457ad08003de74b623f7fb672f67ae48f7862b14d49e31116\"" Feb 9 09:49:45.299629 env[1730]: time="2024-02-09T09:49:45.299543084Z" level=info msg="StartContainer for \"d40d7198ac223d7457ad08003de74b623f7fb672f67ae48f7862b14d49e31116\"" Feb 9 09:49:45.330202 systemd[1]: Started cri-containerd-d40d7198ac223d7457ad08003de74b623f7fb672f67ae48f7862b14d49e31116.scope. Feb 9 09:49:45.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.382828 kernel: audit: type=1400 audit(1707472185.367:1690): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.382971 kernel: audit: type=1400 audit(1707472185.368:1691): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.390439 kernel: audit: type=1400 audit(1707472185.368:1692): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.405328 kernel: audit: type=1400 audit(1707472185.368:1693): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.413231 kernel: audit: type=1400 audit(1707472185.368:1694): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.421327 kernel: audit: type=1400 audit(1707472185.368:1695): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.374000 audit: BPF prog-id=211 op=LOAD Feb 9 09:49:45.375000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.375000 audit[6209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2468 pid=6209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:45.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434306437313938616332323364373435376164303830303364653734 Feb 9 09:49:45.375000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.375000 audit[6209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2468 pid=6209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:45.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434306437313938616332323364373435376164303830303364653734 Feb 9 09:49:45.375000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.375000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.375000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.375000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.375000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.375000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.375000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.375000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.375000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.375000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.375000 audit: BPF prog-id=212 op=LOAD Feb 9 09:49:45.375000 audit[6209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2468 pid=6209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:45.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434306437313938616332323364373435376164303830303364653734 Feb 9 09:49:45.383000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.383000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.383000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.383000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.383000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.383000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.383000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.383000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.383000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.383000 audit: BPF prog-id=213 op=LOAD Feb 9 09:49:45.383000 audit[6209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2468 pid=6209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:45.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434306437313938616332323364373435376164303830303364653734 Feb 9 09:49:45.390000 audit: BPF prog-id=213 op=UNLOAD Feb 9 09:49:45.390000 audit: BPF prog-id=212 op=UNLOAD Feb 9 09:49:45.390000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.390000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.390000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.390000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.390000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.390000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.390000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.390000 audit[6209]: AVC avc: denied { perfmon } for pid=6209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.390000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.390000 audit[6209]: AVC avc: denied { bpf } for pid=6209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:45.390000 audit: BPF prog-id=214 op=LOAD Feb 9 09:49:45.390000 audit[6209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2468 pid=6209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:45.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434306437313938616332323364373435376164303830303364653734 Feb 9 09:49:45.458842 env[1730]: time="2024-02-09T09:49:45.458766474Z" level=info msg="StartContainer for \"d40d7198ac223d7457ad08003de74b623f7fb672f67ae48f7862b14d49e31116\" returns successfully" Feb 9 09:49:46.268879 kubelet[2782]: I0209 09:49:46.268833 2782 scope.go:117] "RemoveContainer" containerID="d10f63d269253593faa4222230b54d1136938b4aede7fdd2dd12b08df09190fb" Feb 9 09:49:46.272019 env[1730]: time="2024-02-09T09:49:46.271961598Z" level=info msg="CreateContainer within sandbox \"990742d91bf0c8d823195c48938aaa8aa0dd8c2c9f6aa0aba712149eee4b53db\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Feb 9 09:49:46.313730 env[1730]: time="2024-02-09T09:49:46.313582617Z" level=info msg="CreateContainer within sandbox \"990742d91bf0c8d823195c48938aaa8aa0dd8c2c9f6aa0aba712149eee4b53db\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"7d921dfec31b79a75a3f2f3d335715c83b80544ca609fb68e4c3c5dc2d2f7ffb\"" Feb 9 09:49:46.316173 env[1730]: time="2024-02-09T09:49:46.316114346Z" level=info msg="StartContainer for \"7d921dfec31b79a75a3f2f3d335715c83b80544ca609fb68e4c3c5dc2d2f7ffb\"" Feb 9 09:49:46.379326 systemd[1]: Started cri-containerd-7d921dfec31b79a75a3f2f3d335715c83b80544ca609fb68e4c3c5dc2d2f7ffb.scope. Feb 9 09:49:46.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.455000 audit: BPF prog-id=215 op=LOAD Feb 9 09:49:46.456000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.456000 audit[6244]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3165 pid=6244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:46.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764393231646665633331623739613735613366326633643333353731 Feb 9 09:49:46.457000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.457000 audit[6244]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3165 pid=6244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:46.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764393231646665633331623739613735613366326633643333353731 Feb 9 09:49:46.457000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.457000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.457000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.457000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.457000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.457000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.457000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.457000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.457000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.457000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.457000 audit: BPF prog-id=216 op=LOAD Feb 9 09:49:46.457000 audit[6244]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3165 pid=6244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:46.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764393231646665633331623739613735613366326633643333353731 Feb 9 09:49:46.459000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.459000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.459000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.459000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.459000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.459000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.459000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.459000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.459000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.459000 audit: BPF prog-id=217 op=LOAD Feb 9 09:49:46.459000 audit[6244]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3165 pid=6244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:46.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764393231646665633331623739613735613366326633643333353731 Feb 9 09:49:46.460000 audit: BPF prog-id=217 op=UNLOAD Feb 9 09:49:46.460000 audit: BPF prog-id=216 op=UNLOAD Feb 9 09:49:46.460000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.460000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.460000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.460000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.460000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.460000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.460000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.460000 audit[6244]: AVC avc: denied { perfmon } for pid=6244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.460000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.460000 audit[6244]: AVC avc: denied { bpf } for pid=6244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:46.460000 audit: BPF prog-id=218 op=LOAD Feb 9 09:49:46.460000 audit[6244]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3165 pid=6244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:46.460000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764393231646665633331623739613735613366326633643333353731 Feb 9 09:49:46.507522 env[1730]: time="2024-02-09T09:49:46.507460060Z" level=info msg="StartContainer for \"7d921dfec31b79a75a3f2f3d335715c83b80544ca609fb68e4c3c5dc2d2f7ffb\" returns successfully" Feb 9 09:49:46.585513 systemd[1]: run-containerd-runc-k8s.io-7d921dfec31b79a75a3f2f3d335715c83b80544ca609fb68e4c3c5dc2d2f7ffb-runc.W47nDC.mount: Deactivated successfully. Feb 9 09:49:47.934000 audit[6219]: AVC avc: denied { watch } for pid=6219 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:47.934000 audit[6219]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400085c0f0 a2=fc6 a3=0 items=0 ppid=2468 pid=6219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:49:47.934000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:49:47.935000 audit[6219]: AVC avc: denied { watch } for pid=6219 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 09:49:47.935000 audit[6219]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000484180 a2=fc6 a3=0 items=0 ppid=2468 pid=6219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c63,c556 key=(null) Feb 9 09:49:47.935000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 09:49:48.544755 systemd[1]: run-containerd-runc-k8s.io-e8408174a709b277a22f479e57d46663c07ccde318d9d8063697d4809712d0d6-runc.oPM9nk.mount: Deactivated successfully. Feb 9 09:49:50.057826 systemd[1]: cri-containerd-4c36ba4a03d51866e8d536d06a91efd7cf41e492801d67c33ac87cbb77a3e8db.scope: Deactivated successfully. Feb 9 09:49:50.058399 systemd[1]: cri-containerd-4c36ba4a03d51866e8d536d06a91efd7cf41e492801d67c33ac87cbb77a3e8db.scope: Consumed 3.619s CPU time. Feb 9 09:49:50.062000 audit: BPF prog-id=93 op=UNLOAD Feb 9 09:49:50.065215 kernel: kauditd_printk_skb: 114 callbacks suppressed Feb 9 09:49:50.065393 kernel: audit: type=1334 audit(1707472190.062:1728): prog-id=93 op=UNLOAD Feb 9 09:49:50.062000 audit: BPF prog-id=106 op=UNLOAD Feb 9 09:49:50.070771 kernel: audit: type=1334 audit(1707472190.062:1729): prog-id=106 op=UNLOAD Feb 9 09:49:50.100135 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4c36ba4a03d51866e8d536d06a91efd7cf41e492801d67c33ac87cbb77a3e8db-rootfs.mount: Deactivated successfully. Feb 9 09:49:50.102392 env[1730]: time="2024-02-09T09:49:50.102314218Z" level=info msg="shim disconnected" id=4c36ba4a03d51866e8d536d06a91efd7cf41e492801d67c33ac87cbb77a3e8db Feb 9 09:49:50.102392 env[1730]: time="2024-02-09T09:49:50.102384076Z" level=warning msg="cleaning up after shim disconnected" id=4c36ba4a03d51866e8d536d06a91efd7cf41e492801d67c33ac87cbb77a3e8db namespace=k8s.io Feb 9 09:49:50.103180 env[1730]: time="2024-02-09T09:49:50.102406946Z" level=info msg="cleaning up dead shim" Feb 9 09:49:50.117894 env[1730]: time="2024-02-09T09:49:50.117813737Z" level=warning msg="cleanup warnings time=\"2024-02-09T09:49:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6306 runtime=io.containerd.runc.v2\n" Feb 9 09:49:50.290780 kubelet[2782]: I0209 09:49:50.290740 2782 scope.go:117] "RemoveContainer" containerID="4c36ba4a03d51866e8d536d06a91efd7cf41e492801d67c33ac87cbb77a3e8db" Feb 9 09:49:50.294972 env[1730]: time="2024-02-09T09:49:50.294920993Z" level=info msg="CreateContainer within sandbox \"3c8033b48fc534a16d93815af8e7c023ac9e9f83a31652861fac03392c5ea4d5\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Feb 9 09:49:50.323640 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2143650947.mount: Deactivated successfully. Feb 9 09:49:50.332595 env[1730]: time="2024-02-09T09:49:50.332532782Z" level=info msg="CreateContainer within sandbox \"3c8033b48fc534a16d93815af8e7c023ac9e9f83a31652861fac03392c5ea4d5\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"270026b3e996de2a956ac005095b3ea1a476dc3c71d307373dba24e2d5122f2a\"" Feb 9 09:49:50.333565 env[1730]: time="2024-02-09T09:49:50.333518399Z" level=info msg="StartContainer for \"270026b3e996de2a956ac005095b3ea1a476dc3c71d307373dba24e2d5122f2a\"" Feb 9 09:49:50.376364 systemd[1]: Started cri-containerd-270026b3e996de2a956ac005095b3ea1a476dc3c71d307373dba24e2d5122f2a.scope. Feb 9 09:49:50.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.425590 kernel: audit: type=1400 audit(1707472190.409:1730): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.425806 kernel: audit: type=1400 audit(1707472190.409:1731): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.425882 kernel: audit: type=1400 audit(1707472190.409:1732): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.432983 kernel: audit: type=1400 audit(1707472190.409:1733): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.452342 kernel: audit: type=1400 audit(1707472190.409:1734): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.452478 kernel: audit: type=1400 audit(1707472190.409:1735): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.467531 kernel: audit: type=1400 audit(1707472190.409:1736): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.478735 kernel: audit: type=1400 audit(1707472190.409:1737): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit: BPF prog-id=219 op=LOAD Feb 9 09:49:50.417000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit[6328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2446 pid=6328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:50.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237303032366233653939366465326139353661633030353039356233 Feb 9 09:49:50.417000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit[6328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2446 pid=6328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:50.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237303032366233653939366465326139353661633030353039356233 Feb 9 09:49:50.417000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.417000 audit: BPF prog-id=220 op=LOAD Feb 9 09:49:50.417000 audit[6328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2446 pid=6328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:50.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237303032366233653939366465326139353661633030353039356233 Feb 9 09:49:50.424000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.424000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.424000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.424000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.424000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.424000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.424000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.424000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.424000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.424000 audit: BPF prog-id=221 op=LOAD Feb 9 09:49:50.424000 audit[6328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2446 pid=6328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:50.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237303032366233653939366465326139353661633030353039356233 Feb 9 09:49:50.432000 audit: BPF prog-id=221 op=UNLOAD Feb 9 09:49:50.432000 audit: BPF prog-id=220 op=UNLOAD Feb 9 09:49:50.432000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.432000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.432000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.432000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.432000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.432000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.432000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.432000 audit[6328]: AVC avc: denied { perfmon } for pid=6328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.432000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.432000 audit[6328]: AVC avc: denied { bpf } for pid=6328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 09:49:50.432000 audit: BPF prog-id=222 op=LOAD Feb 9 09:49:50.432000 audit[6328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2446 pid=6328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 09:49:50.432000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237303032366233653939366465326139353661633030353039356233 Feb 9 09:49:50.501274 env[1730]: time="2024-02-09T09:49:50.501193163Z" level=info msg="StartContainer for \"270026b3e996de2a956ac005095b3ea1a476dc3c71d307373dba24e2d5122f2a\" returns successfully" Feb 9 09:49:55.130403 kubelet[2782]: E0209 09:49:55.130340 2782 controller.go:193] "Failed to update lease" err="Put \"https://172.31.17.0:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-17-0?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"