Apr 12 18:20:37.016202 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Apr 12 18:20:37.016239 kernel: Linux version 5.15.154-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Apr 12 17:21:24 -00 2024 Apr 12 18:20:37.016261 kernel: efi: EFI v2.70 by EDK II Apr 12 18:20:37.016277 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x7174cf98 Apr 12 18:20:37.016291 kernel: ACPI: Early table checksum verification disabled Apr 12 18:20:37.016304 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Apr 12 18:20:37.016320 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Apr 12 18:20:37.016335 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Apr 12 18:20:37.016349 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Apr 12 18:20:37.016363 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Apr 12 18:20:37.016380 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Apr 12 18:20:37.016394 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Apr 12 18:20:37.016408 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Apr 12 18:20:37.016423 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Apr 12 18:20:37.016439 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Apr 12 18:20:37.016458 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Apr 12 18:20:37.016473 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Apr 12 18:20:37.016488 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Apr 12 18:20:37.016519 kernel: printk: bootconsole [uart0] enabled Apr 12 18:20:37.016539 kernel: NUMA: Failed to initialise from firmware Apr 12 18:20:37.016555 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Apr 12 18:20:37.016570 kernel: NUMA: NODE_DATA [mem 0x4b5843900-0x4b5848fff] Apr 12 18:20:37.016585 kernel: Zone ranges: Apr 12 18:20:37.016599 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Apr 12 18:20:37.016614 kernel: DMA32 empty Apr 12 18:20:37.016628 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Apr 12 18:20:37.016647 kernel: Movable zone start for each node Apr 12 18:20:37.016662 kernel: Early memory node ranges Apr 12 18:20:37.016677 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Apr 12 18:20:37.016691 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Apr 12 18:20:37.016706 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Apr 12 18:20:37.016720 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Apr 12 18:20:37.016735 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Apr 12 18:20:37.016749 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Apr 12 18:20:37.016764 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Apr 12 18:20:37.016779 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Apr 12 18:20:37.016793 kernel: psci: probing for conduit method from ACPI. Apr 12 18:20:37.016808 kernel: psci: PSCIv1.0 detected in firmware. Apr 12 18:20:37.016826 kernel: psci: Using standard PSCI v0.2 function IDs Apr 12 18:20:37.016841 kernel: psci: Trusted OS migration not required Apr 12 18:20:37.016862 kernel: psci: SMC Calling Convention v1.1 Apr 12 18:20:37.016877 kernel: ACPI: SRAT not present Apr 12 18:20:37.016893 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Apr 12 18:20:37.016913 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Apr 12 18:20:37.016928 kernel: pcpu-alloc: [0] 0 [0] 1 Apr 12 18:20:37.016944 kernel: Detected PIPT I-cache on CPU0 Apr 12 18:20:37.016959 kernel: CPU features: detected: GIC system register CPU interface Apr 12 18:20:37.016974 kernel: CPU features: detected: Spectre-v2 Apr 12 18:20:37.016989 kernel: CPU features: detected: Spectre-v3a Apr 12 18:20:37.017004 kernel: CPU features: detected: Spectre-BHB Apr 12 18:20:37.017020 kernel: CPU features: kernel page table isolation forced ON by KASLR Apr 12 18:20:37.017035 kernel: CPU features: detected: Kernel page table isolation (KPTI) Apr 12 18:20:37.017051 kernel: CPU features: detected: ARM erratum 1742098 Apr 12 18:20:37.017066 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Apr 12 18:20:37.017085 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Apr 12 18:20:37.017100 kernel: Policy zone: Normal Apr 12 18:20:37.017118 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=c0b96868344262519ffdb2dae3782c942008a0fecdbc0bc85d2e170bd2e8b8a8 Apr 12 18:20:37.017134 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Apr 12 18:20:37.017150 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Apr 12 18:20:37.017165 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Apr 12 18:20:37.017181 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Apr 12 18:20:37.017196 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Apr 12 18:20:37.017212 kernel: Memory: 3824652K/4030464K available (9792K kernel code, 2092K rwdata, 7568K rodata, 36352K init, 777K bss, 205812K reserved, 0K cma-reserved) Apr 12 18:20:37.017227 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Apr 12 18:20:37.017246 kernel: trace event string verifier disabled Apr 12 18:20:37.017262 kernel: rcu: Preemptible hierarchical RCU implementation. Apr 12 18:20:37.017277 kernel: rcu: RCU event tracing is enabled. Apr 12 18:20:37.017293 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Apr 12 18:20:37.017308 kernel: Trampoline variant of Tasks RCU enabled. Apr 12 18:20:37.017324 kernel: Tracing variant of Tasks RCU enabled. Apr 12 18:20:37.017339 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Apr 12 18:20:37.017355 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Apr 12 18:20:37.017370 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Apr 12 18:20:37.017385 kernel: GICv3: 96 SPIs implemented Apr 12 18:20:37.017400 kernel: GICv3: 0 Extended SPIs implemented Apr 12 18:20:37.017415 kernel: GICv3: Distributor has no Range Selector support Apr 12 18:20:37.017434 kernel: Root IRQ handler: gic_handle_irq Apr 12 18:20:37.017450 kernel: GICv3: 16 PPIs implemented Apr 12 18:20:37.017465 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Apr 12 18:20:37.017480 kernel: ACPI: SRAT not present Apr 12 18:20:37.017494 kernel: ITS [mem 0x10080000-0x1009ffff] Apr 12 18:20:37.017526 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Apr 12 18:20:37.017544 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Apr 12 18:20:37.017560 kernel: GICv3: using LPI property table @0x00000004000c0000 Apr 12 18:20:37.017575 kernel: ITS: Using hypervisor restricted LPI range [128] Apr 12 18:20:37.017590 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Apr 12 18:20:37.017606 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Apr 12 18:20:37.017626 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Apr 12 18:20:37.017642 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Apr 12 18:20:37.017657 kernel: Console: colour dummy device 80x25 Apr 12 18:20:37.017673 kernel: printk: console [tty1] enabled Apr 12 18:20:37.017689 kernel: ACPI: Core revision 20210730 Apr 12 18:20:37.017705 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Apr 12 18:20:37.017721 kernel: pid_max: default: 32768 minimum: 301 Apr 12 18:20:37.017736 kernel: LSM: Security Framework initializing Apr 12 18:20:37.017752 kernel: SELinux: Initializing. Apr 12 18:20:37.017768 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Apr 12 18:20:37.017788 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Apr 12 18:20:37.017803 kernel: rcu: Hierarchical SRCU implementation. Apr 12 18:20:37.017819 kernel: Platform MSI: ITS@0x10080000 domain created Apr 12 18:20:37.017835 kernel: PCI/MSI: ITS@0x10080000 domain created Apr 12 18:20:37.017850 kernel: Remapping and enabling EFI services. Apr 12 18:20:37.017866 kernel: smp: Bringing up secondary CPUs ... Apr 12 18:20:37.017881 kernel: Detected PIPT I-cache on CPU1 Apr 12 18:20:37.017897 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Apr 12 18:20:37.017913 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Apr 12 18:20:37.017932 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Apr 12 18:20:37.017948 kernel: smp: Brought up 1 node, 2 CPUs Apr 12 18:20:37.017963 kernel: SMP: Total of 2 processors activated. Apr 12 18:20:37.017979 kernel: CPU features: detected: 32-bit EL0 Support Apr 12 18:20:37.017994 kernel: CPU features: detected: 32-bit EL1 Support Apr 12 18:20:37.018010 kernel: CPU features: detected: CRC32 instructions Apr 12 18:20:37.018025 kernel: CPU: All CPU(s) started at EL1 Apr 12 18:20:37.018040 kernel: alternatives: patching kernel code Apr 12 18:20:37.018056 kernel: devtmpfs: initialized Apr 12 18:20:37.018075 kernel: KASLR disabled due to lack of seed Apr 12 18:20:37.018091 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Apr 12 18:20:37.018108 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Apr 12 18:20:37.018133 kernel: pinctrl core: initialized pinctrl subsystem Apr 12 18:20:37.018153 kernel: SMBIOS 3.0.0 present. Apr 12 18:20:37.018170 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Apr 12 18:20:37.018186 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Apr 12 18:20:37.018202 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Apr 12 18:20:37.018219 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Apr 12 18:20:37.018235 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Apr 12 18:20:37.018251 kernel: audit: initializing netlink subsys (disabled) Apr 12 18:20:37.018268 kernel: audit: type=2000 audit(0.247:1): state=initialized audit_enabled=0 res=1 Apr 12 18:20:37.018287 kernel: thermal_sys: Registered thermal governor 'step_wise' Apr 12 18:20:37.018304 kernel: cpuidle: using governor menu Apr 12 18:20:37.018320 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Apr 12 18:20:37.018336 kernel: ASID allocator initialised with 32768 entries Apr 12 18:20:37.018352 kernel: ACPI: bus type PCI registered Apr 12 18:20:37.018372 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Apr 12 18:20:37.018389 kernel: Serial: AMBA PL011 UART driver Apr 12 18:20:37.018405 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Apr 12 18:20:37.018421 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Apr 12 18:20:37.018438 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Apr 12 18:20:37.018454 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Apr 12 18:20:37.018470 kernel: cryptd: max_cpu_qlen set to 1000 Apr 12 18:20:37.018486 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Apr 12 18:20:37.025549 kernel: ACPI: Added _OSI(Module Device) Apr 12 18:20:37.025601 kernel: ACPI: Added _OSI(Processor Device) Apr 12 18:20:37.025619 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Apr 12 18:20:37.025636 kernel: ACPI: Added _OSI(Processor Aggregator Device) Apr 12 18:20:37.025653 kernel: ACPI: Added _OSI(Linux-Dell-Video) Apr 12 18:20:37.025670 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Apr 12 18:20:37.025686 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Apr 12 18:20:37.025703 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Apr 12 18:20:37.025719 kernel: ACPI: Interpreter enabled Apr 12 18:20:37.025736 kernel: ACPI: Using GIC for interrupt routing Apr 12 18:20:37.025757 kernel: ACPI: MCFG table detected, 1 entries Apr 12 18:20:37.025774 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Apr 12 18:20:37.026048 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Apr 12 18:20:37.026244 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Apr 12 18:20:37.026435 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Apr 12 18:20:37.026659 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Apr 12 18:20:37.026851 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Apr 12 18:20:37.026879 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Apr 12 18:20:37.026897 kernel: acpiphp: Slot [1] registered Apr 12 18:20:37.026913 kernel: acpiphp: Slot [2] registered Apr 12 18:20:37.026930 kernel: acpiphp: Slot [3] registered Apr 12 18:20:37.026946 kernel: acpiphp: Slot [4] registered Apr 12 18:20:37.026962 kernel: acpiphp: Slot [5] registered Apr 12 18:20:37.026979 kernel: acpiphp: Slot [6] registered Apr 12 18:20:37.026995 kernel: acpiphp: Slot [7] registered Apr 12 18:20:37.027011 kernel: acpiphp: Slot [8] registered Apr 12 18:20:37.027031 kernel: acpiphp: Slot [9] registered Apr 12 18:20:37.027048 kernel: acpiphp: Slot [10] registered Apr 12 18:20:37.027064 kernel: acpiphp: Slot [11] registered Apr 12 18:20:37.027080 kernel: acpiphp: Slot [12] registered Apr 12 18:20:37.027096 kernel: acpiphp: Slot [13] registered Apr 12 18:20:37.027112 kernel: acpiphp: Slot [14] registered Apr 12 18:20:37.027129 kernel: acpiphp: Slot [15] registered Apr 12 18:20:37.027145 kernel: acpiphp: Slot [16] registered Apr 12 18:20:37.027161 kernel: acpiphp: Slot [17] registered Apr 12 18:20:37.027177 kernel: acpiphp: Slot [18] registered Apr 12 18:20:37.027197 kernel: acpiphp: Slot [19] registered Apr 12 18:20:37.027213 kernel: acpiphp: Slot [20] registered Apr 12 18:20:37.027230 kernel: acpiphp: Slot [21] registered Apr 12 18:20:37.027246 kernel: acpiphp: Slot [22] registered Apr 12 18:20:37.027262 kernel: acpiphp: Slot [23] registered Apr 12 18:20:37.027277 kernel: acpiphp: Slot [24] registered Apr 12 18:20:37.027294 kernel: acpiphp: Slot [25] registered Apr 12 18:20:37.027310 kernel: acpiphp: Slot [26] registered Apr 12 18:20:37.027326 kernel: acpiphp: Slot [27] registered Apr 12 18:20:37.027346 kernel: acpiphp: Slot [28] registered Apr 12 18:20:37.027362 kernel: acpiphp: Slot [29] registered Apr 12 18:20:37.027378 kernel: acpiphp: Slot [30] registered Apr 12 18:20:37.027394 kernel: acpiphp: Slot [31] registered Apr 12 18:20:37.027410 kernel: PCI host bridge to bus 0000:00 Apr 12 18:20:37.027646 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Apr 12 18:20:37.030650 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Apr 12 18:20:37.031930 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Apr 12 18:20:37.032130 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Apr 12 18:20:37.032373 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Apr 12 18:20:37.033477 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Apr 12 18:20:37.033715 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Apr 12 18:20:37.033926 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Apr 12 18:20:37.034119 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Apr 12 18:20:37.034318 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Apr 12 18:20:37.034568 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Apr 12 18:20:37.034774 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Apr 12 18:20:37.034972 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Apr 12 18:20:37.035166 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Apr 12 18:20:37.035356 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Apr 12 18:20:37.040687 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Apr 12 18:20:37.040933 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Apr 12 18:20:37.041141 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Apr 12 18:20:37.041338 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Apr 12 18:20:37.043439 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Apr 12 18:20:37.043680 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Apr 12 18:20:37.043859 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Apr 12 18:20:37.044033 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Apr 12 18:20:37.044064 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Apr 12 18:20:37.044082 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Apr 12 18:20:37.044100 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Apr 12 18:20:37.044116 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Apr 12 18:20:37.044133 kernel: iommu: Default domain type: Translated Apr 12 18:20:37.044150 kernel: iommu: DMA domain TLB invalidation policy: strict mode Apr 12 18:20:37.044166 kernel: vgaarb: loaded Apr 12 18:20:37.044182 kernel: pps_core: LinuxPPS API ver. 1 registered Apr 12 18:20:37.044199 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Apr 12 18:20:37.044220 kernel: PTP clock support registered Apr 12 18:20:37.044236 kernel: Registered efivars operations Apr 12 18:20:37.044253 kernel: clocksource: Switched to clocksource arch_sys_counter Apr 12 18:20:37.044269 kernel: VFS: Disk quotas dquot_6.6.0 Apr 12 18:20:37.044285 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Apr 12 18:20:37.044302 kernel: pnp: PnP ACPI init Apr 12 18:20:37.044496 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Apr 12 18:20:37.044538 kernel: pnp: PnP ACPI: found 1 devices Apr 12 18:20:37.044556 kernel: NET: Registered PF_INET protocol family Apr 12 18:20:37.044578 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Apr 12 18:20:37.044595 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Apr 12 18:20:37.044612 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Apr 12 18:20:37.044628 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Apr 12 18:20:37.044645 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Apr 12 18:20:37.044662 kernel: TCP: Hash tables configured (established 32768 bind 32768) Apr 12 18:20:37.044678 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Apr 12 18:20:37.044695 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Apr 12 18:20:37.044711 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Apr 12 18:20:37.044732 kernel: PCI: CLS 0 bytes, default 64 Apr 12 18:20:37.044748 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Apr 12 18:20:37.044765 kernel: kvm [1]: HYP mode not available Apr 12 18:20:37.044781 kernel: Initialise system trusted keyrings Apr 12 18:20:37.044797 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Apr 12 18:20:37.044814 kernel: Key type asymmetric registered Apr 12 18:20:37.044830 kernel: Asymmetric key parser 'x509' registered Apr 12 18:20:37.044846 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Apr 12 18:20:37.044863 kernel: io scheduler mq-deadline registered Apr 12 18:20:37.044883 kernel: io scheduler kyber registered Apr 12 18:20:37.044899 kernel: io scheduler bfq registered Apr 12 18:20:37.045101 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Apr 12 18:20:37.045125 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Apr 12 18:20:37.045142 kernel: ACPI: button: Power Button [PWRB] Apr 12 18:20:37.045159 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Apr 12 18:20:37.045177 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Apr 12 18:20:37.045368 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Apr 12 18:20:37.045395 kernel: printk: console [ttyS0] disabled Apr 12 18:20:37.045412 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Apr 12 18:20:37.045429 kernel: printk: console [ttyS0] enabled Apr 12 18:20:37.045445 kernel: printk: bootconsole [uart0] disabled Apr 12 18:20:37.045461 kernel: thunder_xcv, ver 1.0 Apr 12 18:20:37.045478 kernel: thunder_bgx, ver 1.0 Apr 12 18:20:37.045494 kernel: nicpf, ver 1.0 Apr 12 18:20:37.045529 kernel: nicvf, ver 1.0 Apr 12 18:20:37.049387 kernel: rtc-efi rtc-efi.0: registered as rtc0 Apr 12 18:20:37.049637 kernel: rtc-efi rtc-efi.0: setting system clock to 2024-04-12T18:20:36 UTC (1712946036) Apr 12 18:20:37.049663 kernel: hid: raw HID events driver (C) Jiri Kosina Apr 12 18:20:37.049680 kernel: NET: Registered PF_INET6 protocol family Apr 12 18:20:37.049696 kernel: Segment Routing with IPv6 Apr 12 18:20:37.049712 kernel: In-situ OAM (IOAM) with IPv6 Apr 12 18:20:37.049728 kernel: NET: Registered PF_PACKET protocol family Apr 12 18:20:37.049744 kernel: Key type dns_resolver registered Apr 12 18:20:37.049761 kernel: registered taskstats version 1 Apr 12 18:20:37.049782 kernel: Loading compiled-in X.509 certificates Apr 12 18:20:37.049799 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.154-flatcar: 8c258d82bbd8df4a9da2c0ea4108142f04be6b34' Apr 12 18:20:37.049816 kernel: Key type .fscrypt registered Apr 12 18:20:37.049832 kernel: Key type fscrypt-provisioning registered Apr 12 18:20:37.049848 kernel: ima: No TPM chip found, activating TPM-bypass! Apr 12 18:20:37.049864 kernel: ima: Allocated hash algorithm: sha1 Apr 12 18:20:37.049880 kernel: ima: No architecture policies found Apr 12 18:20:37.049897 kernel: Freeing unused kernel memory: 36352K Apr 12 18:20:37.049913 kernel: Run /init as init process Apr 12 18:20:37.049933 kernel: with arguments: Apr 12 18:20:37.049950 kernel: /init Apr 12 18:20:37.049966 kernel: with environment: Apr 12 18:20:37.049982 kernel: HOME=/ Apr 12 18:20:37.049998 kernel: TERM=linux Apr 12 18:20:37.050014 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Apr 12 18:20:37.050035 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Apr 12 18:20:37.050057 systemd[1]: Detected virtualization amazon. Apr 12 18:20:37.050079 systemd[1]: Detected architecture arm64. Apr 12 18:20:37.050097 systemd[1]: Running in initrd. Apr 12 18:20:37.050114 systemd[1]: No hostname configured, using default hostname. Apr 12 18:20:37.050131 systemd[1]: Hostname set to . Apr 12 18:20:37.050149 systemd[1]: Initializing machine ID from VM UUID. Apr 12 18:20:37.050167 systemd[1]: Queued start job for default target initrd.target. Apr 12 18:20:37.050184 systemd[1]: Started systemd-ask-password-console.path. Apr 12 18:20:37.050202 systemd[1]: Reached target cryptsetup.target. Apr 12 18:20:37.050224 systemd[1]: Reached target paths.target. Apr 12 18:20:37.050242 systemd[1]: Reached target slices.target. Apr 12 18:20:37.050259 systemd[1]: Reached target swap.target. Apr 12 18:20:37.050276 systemd[1]: Reached target timers.target. Apr 12 18:20:37.050295 systemd[1]: Listening on iscsid.socket. Apr 12 18:20:37.050313 systemd[1]: Listening on iscsiuio.socket. Apr 12 18:20:37.050331 systemd[1]: Listening on systemd-journald-audit.socket. Apr 12 18:20:37.050349 systemd[1]: Listening on systemd-journald-dev-log.socket. Apr 12 18:20:37.050372 systemd[1]: Listening on systemd-journald.socket. Apr 12 18:20:37.050389 systemd[1]: Listening on systemd-networkd.socket. Apr 12 18:20:37.050407 systemd[1]: Listening on systemd-udevd-control.socket. Apr 12 18:20:37.050425 systemd[1]: Listening on systemd-udevd-kernel.socket. Apr 12 18:20:37.050442 systemd[1]: Reached target sockets.target. Apr 12 18:20:37.059854 systemd[1]: Starting kmod-static-nodes.service... Apr 12 18:20:37.059898 systemd[1]: Finished network-cleanup.service. Apr 12 18:20:37.059918 systemd[1]: Starting systemd-fsck-usr.service... Apr 12 18:20:37.062908 systemd[1]: Starting systemd-journald.service... Apr 12 18:20:37.062951 systemd[1]: Starting systemd-modules-load.service... Apr 12 18:20:37.062971 systemd[1]: Starting systemd-resolved.service... Apr 12 18:20:37.062990 systemd[1]: Starting systemd-vconsole-setup.service... Apr 12 18:20:37.063008 systemd[1]: Finished kmod-static-nodes.service. Apr 12 18:20:37.063027 systemd[1]: Finished systemd-fsck-usr.service. Apr 12 18:20:37.063045 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Apr 12 18:20:37.063063 systemd[1]: Finished systemd-vconsole-setup.service. Apr 12 18:20:37.063081 systemd[1]: Starting dracut-cmdline-ask.service... Apr 12 18:20:37.063098 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Apr 12 18:20:37.063123 kernel: audit: type=1130 audit(1712946036.999:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:37.063142 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Apr 12 18:20:37.063159 kernel: Bridge firewalling registered Apr 12 18:20:37.063176 systemd[1]: Finished dracut-cmdline-ask.service. Apr 12 18:20:37.063194 systemd[1]: Starting dracut-cmdline.service... Apr 12 18:20:37.063212 kernel: audit: type=1130 audit(1712946037.047:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:37.063234 systemd-journald[269]: Journal started Apr 12 18:20:37.063346 systemd-journald[269]: Runtime Journal (/run/log/journal/ec24a4306543564d73029e45119a8933) is 8.0M, max 75.4M, 67.4M free. Apr 12 18:20:36.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:37.073596 systemd[1]: Started systemd-journald.service. Apr 12 18:20:37.073649 kernel: SCSI subsystem initialized Apr 12 18:20:37.073674 kernel: audit: type=1130 audit(1712946037.070:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:37.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:37.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:36.942413 systemd-modules-load[270]: Inserted module 'overlay' Apr 12 18:20:37.030887 systemd-modules-load[270]: Inserted module 'br_netfilter' Apr 12 18:20:37.097629 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Apr 12 18:20:37.097685 kernel: device-mapper: uevent: version 1.0.3 Apr 12 18:20:37.097709 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Apr 12 18:20:37.105600 systemd-modules-load[270]: Inserted module 'dm_multipath' Apr 12 18:20:37.133078 kernel: audit: type=1130 audit(1712946037.108:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:37.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:37.133272 dracut-cmdline[287]: dracut-dracut-053 Apr 12 18:20:37.106920 systemd[1]: Finished systemd-modules-load.service. Apr 12 18:20:37.140732 dracut-cmdline[287]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=c0b96868344262519ffdb2dae3782c942008a0fecdbc0bc85d2e170bd2e8b8a8 Apr 12 18:20:37.119454 systemd[1]: Starting systemd-sysctl.service... Apr 12 18:20:37.137985 systemd[1]: Finished systemd-sysctl.service. Apr 12 18:20:37.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:37.179545 kernel: audit: type=1130 audit(1712946037.170:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:37.188709 systemd-resolved[271]: Positive Trust Anchors: Apr 12 18:20:37.189229 systemd-resolved[271]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Apr 12 18:20:37.189433 systemd-resolved[271]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Apr 12 18:20:37.301541 kernel: Loading iSCSI transport class v2.0-870. Apr 12 18:20:37.322544 kernel: iscsi: registered transport (tcp) Apr 12 18:20:37.349662 kernel: iscsi: registered transport (qla4xxx) Apr 12 18:20:37.349746 kernel: QLogic iSCSI HBA Driver Apr 12 18:20:37.551183 systemd-resolved[271]: Defaulting to hostname 'linux'. Apr 12 18:20:37.554891 kernel: random: crng init done Apr 12 18:20:37.553106 systemd[1]: Started systemd-resolved.service. Apr 12 18:20:37.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:37.559806 systemd[1]: Reached target nss-lookup.target. Apr 12 18:20:37.570966 kernel: audit: type=1130 audit(1712946037.558:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:37.588778 systemd[1]: Finished dracut-cmdline.service. Apr 12 18:20:37.602757 kernel: audit: type=1130 audit(1712946037.587:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:37.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:37.598324 systemd[1]: Starting dracut-pre-udev.service... Apr 12 18:20:37.665557 kernel: raid6: neonx8 gen() 6361 MB/s Apr 12 18:20:37.683542 kernel: raid6: neonx8 xor() 4799 MB/s Apr 12 18:20:37.701541 kernel: raid6: neonx4 gen() 6477 MB/s Apr 12 18:20:37.719546 kernel: raid6: neonx4 xor() 5011 MB/s Apr 12 18:20:37.737551 kernel: raid6: neonx2 gen() 5715 MB/s Apr 12 18:20:37.755540 kernel: raid6: neonx2 xor() 4590 MB/s Apr 12 18:20:37.773544 kernel: raid6: neonx1 gen() 4444 MB/s Apr 12 18:20:37.791554 kernel: raid6: neonx1 xor() 3711 MB/s Apr 12 18:20:37.809549 kernel: raid6: int64x8 gen() 3408 MB/s Apr 12 18:20:37.827540 kernel: raid6: int64x8 xor() 2100 MB/s Apr 12 18:20:37.845556 kernel: raid6: int64x4 gen() 3780 MB/s Apr 12 18:20:37.863541 kernel: raid6: int64x4 xor() 2200 MB/s Apr 12 18:20:37.881551 kernel: raid6: int64x2 gen() 3556 MB/s Apr 12 18:20:37.899551 kernel: raid6: int64x2 xor() 1953 MB/s Apr 12 18:20:37.917547 kernel: raid6: int64x1 gen() 2764 MB/s Apr 12 18:20:37.937002 kernel: raid6: int64x1 xor() 1454 MB/s Apr 12 18:20:37.937055 kernel: raid6: using algorithm neonx4 gen() 6477 MB/s Apr 12 18:20:37.937080 kernel: raid6: .... xor() 5011 MB/s, rmw enabled Apr 12 18:20:37.938791 kernel: raid6: using neon recovery algorithm Apr 12 18:20:37.957583 kernel: xor: measuring software checksum speed Apr 12 18:20:37.960580 kernel: 8regs : 9398 MB/sec Apr 12 18:20:37.960669 kernel: 32regs : 11124 MB/sec Apr 12 18:20:37.967115 kernel: arm64_neon : 9466 MB/sec Apr 12 18:20:37.967193 kernel: xor: using function: 32regs (11124 MB/sec) Apr 12 18:20:38.065551 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Apr 12 18:20:38.082708 systemd[1]: Finished dracut-pre-udev.service. Apr 12 18:20:38.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:38.099000 audit: BPF prog-id=7 op=LOAD Apr 12 18:20:38.107786 systemd[1]: Starting systemd-udevd.service... Apr 12 18:20:38.111453 kernel: audit: type=1130 audit(1712946038.081:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:38.111490 kernel: audit: type=1334 audit(1712946038.099:10): prog-id=7 op=LOAD Apr 12 18:20:38.105000 audit: BPF prog-id=8 op=LOAD Apr 12 18:20:38.137788 systemd-udevd[469]: Using default interface naming scheme 'v252'. Apr 12 18:20:38.149271 systemd[1]: Started systemd-udevd.service. Apr 12 18:20:38.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:38.157872 systemd[1]: Starting dracut-pre-trigger.service... Apr 12 18:20:38.187636 dracut-pre-trigger[477]: rd.md=0: removing MD RAID activation Apr 12 18:20:38.255762 systemd[1]: Finished dracut-pre-trigger.service. Apr 12 18:20:38.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:38.261835 systemd[1]: Starting systemd-udev-trigger.service... Apr 12 18:20:38.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:38.367673 systemd[1]: Finished systemd-udev-trigger.service. Apr 12 18:20:38.494790 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Apr 12 18:20:38.494874 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Apr 12 18:20:38.504569 kernel: ena 0000:00:05.0: ENA device version: 0.10 Apr 12 18:20:38.504967 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Apr 12 18:20:38.505521 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Apr 12 18:20:38.512798 kernel: nvme nvme0: pci function 0000:00:04.0 Apr 12 18:20:38.513116 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:24:61:fd:1c:97 Apr 12 18:20:38.518555 kernel: nvme nvme0: 2/0/0 default/read/poll queues Apr 12 18:20:38.524677 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Apr 12 18:20:38.524736 kernel: GPT:9289727 != 16777215 Apr 12 18:20:38.524760 kernel: GPT:Alternate GPT header not at the end of the disk. Apr 12 18:20:38.526855 kernel: GPT:9289727 != 16777215 Apr 12 18:20:38.528151 kernel: GPT: Use GNU Parted to correct GPT errors. Apr 12 18:20:38.531554 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Apr 12 18:20:38.535672 (udev-worker)[529]: Network interface NamePolicy= disabled on kernel command line. Apr 12 18:20:38.601548 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (535) Apr 12 18:20:38.621100 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Apr 12 18:20:38.701122 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Apr 12 18:20:38.733704 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Apr 12 18:20:38.740764 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Apr 12 18:20:38.765411 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Apr 12 18:20:38.771238 systemd[1]: Starting disk-uuid.service... Apr 12 18:20:38.789004 disk-uuid[631]: Primary Header is updated. Apr 12 18:20:38.789004 disk-uuid[631]: Secondary Entries is updated. Apr 12 18:20:38.789004 disk-uuid[631]: Secondary Header is updated. Apr 12 18:20:38.801542 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Apr 12 18:20:38.810622 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Apr 12 18:20:38.817538 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Apr 12 18:20:39.819535 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Apr 12 18:20:39.821424 disk-uuid[632]: The operation has completed successfully. Apr 12 18:20:40.008959 systemd[1]: disk-uuid.service: Deactivated successfully. Apr 12 18:20:40.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:40.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:40.009200 systemd[1]: Finished disk-uuid.service. Apr 12 18:20:40.012934 systemd[1]: Starting verity-setup.service... Apr 12 18:20:40.053586 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Apr 12 18:20:40.144957 systemd[1]: Found device dev-mapper-usr.device. Apr 12 18:20:40.151455 systemd[1]: Mounting sysusr-usr.mount... Apr 12 18:20:40.162482 systemd[1]: Finished verity-setup.service. Apr 12 18:20:40.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:40.247602 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Apr 12 18:20:40.248461 systemd[1]: Mounted sysusr-usr.mount. Apr 12 18:20:40.248920 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Apr 12 18:20:40.250294 systemd[1]: Starting ignition-setup.service... Apr 12 18:20:40.252607 systemd[1]: Starting parse-ip-for-networkd.service... Apr 12 18:20:40.283198 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Apr 12 18:20:40.283239 kernel: BTRFS info (device nvme0n1p6): using free space tree Apr 12 18:20:40.283263 kernel: BTRFS info (device nvme0n1p6): has skinny extents Apr 12 18:20:40.294944 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Apr 12 18:20:40.315941 systemd[1]: mnt-oem.mount: Deactivated successfully. Apr 12 18:20:40.352835 systemd[1]: Finished ignition-setup.service. Apr 12 18:20:40.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:40.358150 systemd[1]: Starting ignition-fetch-offline.service... Apr 12 18:20:40.445639 systemd[1]: Finished parse-ip-for-networkd.service. Apr 12 18:20:40.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:40.462000 audit: BPF prog-id=9 op=LOAD Apr 12 18:20:40.465100 systemd[1]: Starting systemd-networkd.service... Apr 12 18:20:40.513411 systemd-networkd[1144]: lo: Link UP Apr 12 18:20:40.513440 systemd-networkd[1144]: lo: Gained carrier Apr 12 18:20:40.517974 systemd-networkd[1144]: Enumeration completed Apr 12 18:20:40.518151 systemd[1]: Started systemd-networkd.service. Apr 12 18:20:40.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:40.524864 systemd[1]: Reached target network.target. Apr 12 18:20:40.529902 systemd[1]: Starting iscsiuio.service... Apr 12 18:20:40.540251 systemd[1]: Started iscsiuio.service. Apr 12 18:20:40.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:40.544447 systemd-networkd[1144]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Apr 12 18:20:40.549293 systemd[1]: Starting iscsid.service... Apr 12 18:20:40.558261 iscsid[1149]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Apr 12 18:20:40.558261 iscsid[1149]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Apr 12 18:20:40.558261 iscsid[1149]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Apr 12 18:20:40.558261 iscsid[1149]: If using hardware iscsi like qla4xxx this message can be ignored. Apr 12 18:20:40.558261 iscsid[1149]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Apr 12 18:20:40.582740 iscsid[1149]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Apr 12 18:20:40.587399 systemd-networkd[1144]: eth0: Link UP Apr 12 18:20:40.587419 systemd-networkd[1144]: eth0: Gained carrier Apr 12 18:20:40.594212 systemd[1]: Started iscsid.service. Apr 12 18:20:40.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:40.615588 systemd[1]: Starting dracut-initqueue.service... Apr 12 18:20:40.626206 systemd-networkd[1144]: eth0: DHCPv4 address 172.31.30.133/20, gateway 172.31.16.1 acquired from 172.31.16.1 Apr 12 18:20:40.644270 systemd[1]: Finished dracut-initqueue.service. Apr 12 18:20:40.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:40.648499 systemd[1]: Reached target remote-fs-pre.target. Apr 12 18:20:40.650746 systemd[1]: Reached target remote-cryptsetup.target. Apr 12 18:20:40.658790 systemd[1]: Reached target remote-fs.target. Apr 12 18:20:40.665614 systemd[1]: Starting dracut-pre-mount.service... Apr 12 18:20:40.690621 systemd[1]: Finished dracut-pre-mount.service. Apr 12 18:20:40.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:41.142230 ignition[1075]: Ignition 2.14.0 Apr 12 18:20:41.142261 ignition[1075]: Stage: fetch-offline Apr 12 18:20:41.142640 ignition[1075]: reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:20:41.142706 ignition[1075]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Apr 12 18:20:41.163760 ignition[1075]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Apr 12 18:20:41.164604 ignition[1075]: Ignition finished successfully Apr 12 18:20:41.170785 systemd[1]: Finished ignition-fetch-offline.service. Apr 12 18:20:41.189784 kernel: kauditd_printk_skb: 15 callbacks suppressed Apr 12 18:20:41.189836 kernel: audit: type=1130 audit(1712946041.171:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:41.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:41.184553 systemd[1]: Starting ignition-fetch.service... Apr 12 18:20:41.202122 ignition[1168]: Ignition 2.14.0 Apr 12 18:20:41.202138 ignition[1168]: Stage: fetch Apr 12 18:20:41.202551 ignition[1168]: reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:20:41.202633 ignition[1168]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Apr 12 18:20:41.225500 ignition[1168]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Apr 12 18:20:41.228734 ignition[1168]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Apr 12 18:20:41.239150 ignition[1168]: INFO : PUT result: OK Apr 12 18:20:41.243041 ignition[1168]: DEBUG : parsed url from cmdline: "" Apr 12 18:20:41.245566 ignition[1168]: INFO : no config URL provided Apr 12 18:20:41.245566 ignition[1168]: INFO : reading system config file "/usr/lib/ignition/user.ign" Apr 12 18:20:41.245566 ignition[1168]: INFO : no config at "/usr/lib/ignition/user.ign" Apr 12 18:20:41.245566 ignition[1168]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Apr 12 18:20:41.257576 ignition[1168]: INFO : PUT result: OK Apr 12 18:20:41.259384 ignition[1168]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Apr 12 18:20:41.268549 ignition[1168]: INFO : GET result: OK Apr 12 18:20:41.277743 ignition[1168]: DEBUG : parsing config with SHA512: 161edc5f212df9de6c940d74640e52d37d62701c63044728205413c3e8fb3bde8da1dabc01ae64c7d7ca053b97e5bae1a9d9636bf27a6add8084f4d2be10a9e8 Apr 12 18:20:41.343215 unknown[1168]: fetched base config from "system" Apr 12 18:20:41.343244 unknown[1168]: fetched base config from "system" Apr 12 18:20:41.343259 unknown[1168]: fetched user config from "aws" Apr 12 18:20:41.350825 ignition[1168]: fetch: fetch complete Apr 12 18:20:41.350868 ignition[1168]: fetch: fetch passed Apr 12 18:20:41.352929 ignition[1168]: Ignition finished successfully Apr 12 18:20:41.360343 systemd[1]: Finished ignition-fetch.service. Apr 12 18:20:41.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:41.365935 systemd[1]: Starting ignition-kargs.service... Apr 12 18:20:41.379813 kernel: audit: type=1130 audit(1712946041.358:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:41.391751 ignition[1174]: Ignition 2.14.0 Apr 12 18:20:41.391781 ignition[1174]: Stage: kargs Apr 12 18:20:41.392111 ignition[1174]: reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:20:41.392171 ignition[1174]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Apr 12 18:20:41.407447 ignition[1174]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Apr 12 18:20:41.410573 ignition[1174]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Apr 12 18:20:41.413876 ignition[1174]: INFO : PUT result: OK Apr 12 18:20:41.431940 ignition[1174]: kargs: kargs passed Apr 12 18:20:41.433095 ignition[1174]: Ignition finished successfully Apr 12 18:20:41.437249 systemd[1]: Finished ignition-kargs.service. Apr 12 18:20:41.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:41.442783 systemd[1]: Starting ignition-disks.service... Apr 12 18:20:41.455578 kernel: audit: type=1130 audit(1712946041.439:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:41.460455 ignition[1180]: Ignition 2.14.0 Apr 12 18:20:41.461048 ignition[1180]: Stage: disks Apr 12 18:20:41.461641 ignition[1180]: reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:20:41.461738 ignition[1180]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Apr 12 18:20:41.483010 ignition[1180]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Apr 12 18:20:41.486047 ignition[1180]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Apr 12 18:20:41.490034 ignition[1180]: INFO : PUT result: OK Apr 12 18:20:41.497142 ignition[1180]: disks: disks passed Apr 12 18:20:41.497326 ignition[1180]: Ignition finished successfully Apr 12 18:20:41.502878 systemd[1]: Finished ignition-disks.service. Apr 12 18:20:41.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:41.508948 systemd[1]: Reached target initrd-root-device.target. Apr 12 18:20:41.523194 kernel: audit: type=1130 audit(1712946041.507:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:41.518594 systemd[1]: Reached target local-fs-pre.target. Apr 12 18:20:41.520808 systemd[1]: Reached target local-fs.target. Apr 12 18:20:41.525306 systemd[1]: Reached target sysinit.target. Apr 12 18:20:41.527409 systemd[1]: Reached target basic.target. Apr 12 18:20:41.531128 systemd[1]: Starting systemd-fsck-root.service... Apr 12 18:20:41.576452 systemd-fsck[1188]: ROOT: clean, 612/553520 files, 56018/553472 blocks Apr 12 18:20:41.585675 systemd[1]: Finished systemd-fsck-root.service. Apr 12 18:20:41.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:41.598989 systemd[1]: Mounting sysroot.mount... Apr 12 18:20:41.604722 kernel: audit: type=1130 audit(1712946041.586:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:41.620545 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Apr 12 18:20:41.622308 systemd[1]: Mounted sysroot.mount. Apr 12 18:20:41.627950 systemd[1]: Reached target initrd-root-fs.target. Apr 12 18:20:41.641723 systemd[1]: Mounting sysroot-usr.mount... Apr 12 18:20:41.644667 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Apr 12 18:20:41.644786 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Apr 12 18:20:41.644872 systemd[1]: Reached target ignition-diskful.target. Apr 12 18:20:41.664654 systemd[1]: Mounted sysroot-usr.mount. Apr 12 18:20:41.695052 systemd[1]: Mounting sysroot-usr-share-oem.mount... Apr 12 18:20:41.696779 systemd[1]: Starting initrd-setup-root.service... Apr 12 18:20:41.720563 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1205) Apr 12 18:20:41.726644 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Apr 12 18:20:41.726716 kernel: BTRFS info (device nvme0n1p6): using free space tree Apr 12 18:20:41.726740 initrd-setup-root[1210]: cut: /sysroot/etc/passwd: No such file or directory Apr 12 18:20:41.732491 kernel: BTRFS info (device nvme0n1p6): has skinny extents Apr 12 18:20:41.741556 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Apr 12 18:20:41.747584 initrd-setup-root[1236]: cut: /sysroot/etc/group: No such file or directory Apr 12 18:20:41.747802 systemd[1]: Mounted sysroot-usr-share-oem.mount. Apr 12 18:20:41.762042 initrd-setup-root[1244]: cut: /sysroot/etc/shadow: No such file or directory Apr 12 18:20:41.772135 initrd-setup-root[1252]: cut: /sysroot/etc/gshadow: No such file or directory Apr 12 18:20:42.037906 systemd[1]: Finished initrd-setup-root.service. Apr 12 18:20:42.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:42.046004 systemd[1]: Starting ignition-mount.service... Apr 12 18:20:42.059721 kernel: audit: type=1130 audit(1712946042.042:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:42.059956 systemd[1]: Starting sysroot-boot.service... Apr 12 18:20:42.072042 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Apr 12 18:20:42.076613 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Apr 12 18:20:42.106821 systemd[1]: Finished sysroot-boot.service. Apr 12 18:20:42.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:42.122973 ignition[1273]: INFO : Ignition 2.14.0 Apr 12 18:20:42.126634 kernel: audit: type=1130 audit(1712946042.112:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:42.126677 ignition[1273]: INFO : Stage: mount Apr 12 18:20:42.126677 ignition[1273]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:20:42.126677 ignition[1273]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Apr 12 18:20:42.145689 ignition[1273]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Apr 12 18:20:42.145689 ignition[1273]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Apr 12 18:20:42.163894 ignition[1273]: INFO : PUT result: OK Apr 12 18:20:42.170561 ignition[1273]: INFO : mount: mount passed Apr 12 18:20:42.172998 ignition[1273]: INFO : Ignition finished successfully Apr 12 18:20:42.177407 systemd[1]: Finished ignition-mount.service. Apr 12 18:20:42.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:42.183461 systemd[1]: Starting ignition-files.service... Apr 12 18:20:42.193659 kernel: audit: type=1130 audit(1712946042.180:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:20:42.202578 systemd[1]: Mounting sysroot-usr-share-oem.mount... Apr 12 18:20:42.223604 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1280) Apr 12 18:20:42.229444 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Apr 12 18:20:42.229532 kernel: BTRFS info (device nvme0n1p6): using free space tree Apr 12 18:20:42.229559 kernel: BTRFS info (device nvme0n1p6): has skinny extents Apr 12 18:20:42.239553 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Apr 12 18:20:42.244077 systemd[1]: Mounted sysroot-usr-share-oem.mount. Apr 12 18:20:42.266982 ignition[1299]: INFO : Ignition 2.14.0 Apr 12 18:20:42.266982 ignition[1299]: INFO : Stage: files Apr 12 18:20:42.271899 ignition[1299]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:20:42.271899 ignition[1299]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Apr 12 18:20:42.299460 ignition[1299]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Apr 12 18:20:42.302981 ignition[1299]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Apr 12 18:20:42.307260 ignition[1299]: INFO : PUT result: OK Apr 12 18:20:42.313752 ignition[1299]: DEBUG : files: compiled without relabeling support, skipping Apr 12 18:20:42.318999 ignition[1299]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Apr 12 18:20:42.322793 ignition[1299]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Apr 12 18:20:42.373379 ignition[1299]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Apr 12 18:20:42.377102 ignition[1299]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Apr 12 18:20:42.381558 unknown[1299]: wrote ssh authorized keys file for user: core Apr 12 18:20:42.384379 ignition[1299]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Apr 12 18:20:42.388647 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Apr 12 18:20:42.393279 ignition[1299]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Apr 12 18:20:42.487693 systemd-networkd[1144]: eth0: Gained IPv6LL Apr 12 18:20:42.746800 ignition[1299]: INFO : GET result: OK Apr 12 18:20:43.305773 ignition[1299]: DEBUG : file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Apr 12 18:20:43.312988 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Apr 12 18:20:43.312988 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Apr 12 18:20:43.312988 ignition[1299]: INFO : GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Apr 12 18:20:43.356200 ignition[1299]: INFO : GET result: OK Apr 12 18:20:43.452474 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Apr 12 18:20:43.458831 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Apr 12 18:20:43.458831 ignition[1299]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Apr 12 18:20:43.732133 ignition[1299]: INFO : GET result: OK Apr 12 18:20:44.013791 ignition[1299]: DEBUG : file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Apr 12 18:20:44.019523 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Apr 12 18:20:44.019523 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubectl" Apr 12 18:20:44.028134 ignition[1299]: INFO : GET https://dl.k8s.io/release/v1.27.2/bin/linux/arm64/kubectl: attempt #1 Apr 12 18:20:44.159319 ignition[1299]: INFO : GET result: OK Apr 12 18:20:49.285803 ignition[1299]: DEBUG : file matches expected sum of: 14be61ec35669a27acf2df0380afb85b9b42311d50ca1165718421c5f605df1119ec9ae314696a674051712e80deeaa65e62d2d62ed4d107fe99d0aaf419dafc Apr 12 18:20:49.294450 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubectl" Apr 12 18:20:49.294450 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Apr 12 18:20:49.294450 ignition[1299]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Apr 12 18:20:49.319029 ignition[1299]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2462292809" Apr 12 18:20:49.328612 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1304) Apr 12 18:20:49.328652 ignition[1299]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2462292809": device or resource busy Apr 12 18:20:49.328652 ignition[1299]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2462292809", trying btrfs: device or resource busy Apr 12 18:20:49.328652 ignition[1299]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2462292809" Apr 12 18:20:49.328652 ignition[1299]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2462292809" Apr 12 18:20:49.355099 ignition[1299]: INFO : op(3): [started] unmounting "/mnt/oem2462292809" Apr 12 18:20:49.358207 systemd[1]: mnt-oem2462292809.mount: Deactivated successfully. Apr 12 18:20:49.363729 ignition[1299]: INFO : op(3): [finished] unmounting "/mnt/oem2462292809" Apr 12 18:20:49.366427 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Apr 12 18:20:49.366427 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubeadm" Apr 12 18:20:49.366427 ignition[1299]: INFO : GET https://dl.k8s.io/release/v1.27.2/bin/linux/arm64/kubeadm: attempt #1 Apr 12 18:20:49.556244 ignition[1299]: INFO : GET result: OK Apr 12 18:20:56.250844 ignition[1299]: DEBUG : file matches expected sum of: 45b3100984c979ba0f1c0df8f4211474c2d75ebe916e677dff5fc8e3b3697cf7a953da94e356f39684cc860dff6878b772b7514c55651c2f866d9efeef23f970 Apr 12 18:20:56.259289 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubeadm" Apr 12 18:20:56.259289 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubelet" Apr 12 18:20:56.259289 ignition[1299]: INFO : GET https://dl.k8s.io/release/v1.27.2/bin/linux/arm64/kubelet: attempt #1 Apr 12 18:20:56.315443 ignition[1299]: INFO : GET result: OK Apr 12 18:21:05.995778 ignition[1299]: DEBUG : file matches expected sum of: 71857ff499ae135fa478e1827a0ed8865e578a8d2b1e25876e914fd0beba03733801c0654bcd4c0567bafeb16887dafb2dbbe8d1116e6ea28dcd8366c142d348 Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubelet" Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/docker/daemon.json" Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/docker/daemon.json" Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/flatcar/update.conf" Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/flatcar/update.conf" Apr 12 18:21:06.005935 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Apr 12 18:21:06.005935 ignition[1299]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Apr 12 18:21:06.079549 ignition[1299]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1822832243" Apr 12 18:21:06.082995 ignition[1299]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1822832243": device or resource busy Apr 12 18:21:06.082995 ignition[1299]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1822832243", trying btrfs: device or resource busy Apr 12 18:21:06.082995 ignition[1299]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1822832243" Apr 12 18:21:06.095097 ignition[1299]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1822832243" Apr 12 18:21:06.095097 ignition[1299]: INFO : op(6): [started] unmounting "/mnt/oem1822832243" Apr 12 18:21:06.101737 ignition[1299]: INFO : op(6): [finished] unmounting "/mnt/oem1822832243" Apr 12 18:21:06.101737 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Apr 12 18:21:06.101737 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(11): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Apr 12 18:21:06.101737 ignition[1299]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Apr 12 18:21:06.124378 systemd[1]: mnt-oem1822832243.mount: Deactivated successfully. Apr 12 18:21:06.136775 ignition[1299]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1748603939" Apr 12 18:21:06.143085 ignition[1299]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1748603939": device or resource busy Apr 12 18:21:06.143085 ignition[1299]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1748603939", trying btrfs: device or resource busy Apr 12 18:21:06.143085 ignition[1299]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1748603939" Apr 12 18:21:06.156066 ignition[1299]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1748603939" Apr 12 18:21:06.156066 ignition[1299]: INFO : op(9): [started] unmounting "/mnt/oem1748603939" Apr 12 18:21:06.156066 ignition[1299]: INFO : op(9): [finished] unmounting "/mnt/oem1748603939" Apr 12 18:21:06.156066 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(11): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Apr 12 18:21:06.156066 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Apr 12 18:21:06.156066 ignition[1299]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Apr 12 18:21:06.196430 ignition[1299]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2206159534" Apr 12 18:21:06.200073 ignition[1299]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2206159534": device or resource busy Apr 12 18:21:06.200073 ignition[1299]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2206159534", trying btrfs: device or resource busy Apr 12 18:21:06.200073 ignition[1299]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2206159534" Apr 12 18:21:06.211689 ignition[1299]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2206159534" Apr 12 18:21:06.211689 ignition[1299]: INFO : op(c): [started] unmounting "/mnt/oem2206159534" Apr 12 18:21:06.217709 ignition[1299]: INFO : op(c): [finished] unmounting "/mnt/oem2206159534" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(13): [started] processing unit "amazon-ssm-agent.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(13): op(14): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(13): op(14): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(13): [finished] processing unit "amazon-ssm-agent.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(15): [started] processing unit "nvidia.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(15): [finished] processing unit "nvidia.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(16): [started] processing unit "coreos-metadata-sshkeys@.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(16): [finished] processing unit "coreos-metadata-sshkeys@.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(17): [started] processing unit "prepare-critools.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(17): op(18): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(17): op(18): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(17): [finished] processing unit "prepare-critools.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(19): [started] processing unit "prepare-helm.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(19): op(1a): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(19): op(1a): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(19): [finished] processing unit "prepare-helm.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(1b): [started] processing unit "prepare-cni-plugins.service" Apr 12 18:21:06.222197 ignition[1299]: INFO : files: op(1b): op(1c): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(1b): op(1c): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(1b): [finished] processing unit "prepare-cni-plugins.service" Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(1d): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(1d): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(1e): [started] setting preset to enabled for "prepare-critools.service" Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(1e): [finished] setting preset to enabled for "prepare-critools.service" Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(1f): [started] setting preset to enabled for "prepare-helm.service" Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(1f): [finished] setting preset to enabled for "prepare-helm.service" Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(20): [started] setting preset to enabled for "prepare-cni-plugins.service" Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(20): [finished] setting preset to enabled for "prepare-cni-plugins.service" Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(21): [started] setting preset to enabled for "amazon-ssm-agent.service" Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(21): [finished] setting preset to enabled for "amazon-ssm-agent.service" Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(22): [started] setting preset to enabled for "nvidia.service" Apr 12 18:21:06.296274 ignition[1299]: INFO : files: op(22): [finished] setting preset to enabled for "nvidia.service" Apr 12 18:21:06.358594 ignition[1299]: INFO : files: createResultFile: createFiles: op(23): [started] writing file "/sysroot/etc/.ignition-result.json" Apr 12 18:21:06.358594 ignition[1299]: INFO : files: createResultFile: createFiles: op(23): [finished] writing file "/sysroot/etc/.ignition-result.json" Apr 12 18:21:06.358594 ignition[1299]: INFO : files: files passed Apr 12 18:21:06.358594 ignition[1299]: INFO : Ignition finished successfully Apr 12 18:21:06.372348 systemd[1]: Finished ignition-files.service. Apr 12 18:21:06.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.385567 kernel: audit: type=1130 audit(1712946066.375:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.388275 systemd[1]: Starting initrd-setup-root-after-ignition.service... Apr 12 18:21:06.390725 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Apr 12 18:21:06.392352 systemd[1]: Starting ignition-quench.service... Apr 12 18:21:06.404982 systemd[1]: ignition-quench.service: Deactivated successfully. Apr 12 18:21:06.407496 systemd[1]: Finished ignition-quench.service. Apr 12 18:21:06.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.426167 kernel: audit: type=1130 audit(1712946066.409:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.426209 kernel: audit: type=1131 audit(1712946066.409:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.431729 initrd-setup-root-after-ignition[1324]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Apr 12 18:21:06.437088 systemd[1]: Finished initrd-setup-root-after-ignition.service. Apr 12 18:21:06.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.454347 systemd[1]: Reached target ignition-complete.target. Apr 12 18:21:06.479689 kernel: audit: type=1130 audit(1712946066.452:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.467294 systemd[1]: Starting initrd-parse-etc.service... Apr 12 18:21:06.498636 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Apr 12 18:21:06.499006 systemd[1]: Finished initrd-parse-etc.service. Apr 12 18:21:06.511969 kernel: audit: type=1130 audit(1712946066.501:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.512121 systemd[1]: Reached target initrd-fs.target. Apr 12 18:21:06.522897 kernel: audit: type=1131 audit(1712946066.510:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.522879 systemd[1]: Reached target initrd.target. Apr 12 18:21:06.524792 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Apr 12 18:21:06.537544 systemd[1]: Starting dracut-pre-pivot.service... Apr 12 18:21:06.565851 systemd[1]: Finished dracut-pre-pivot.service. Apr 12 18:21:06.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.578916 systemd[1]: Starting initrd-cleanup.service... Apr 12 18:21:06.586551 kernel: audit: type=1130 audit(1712946066.568:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.600824 systemd[1]: Stopped target nss-lookup.target. Apr 12 18:21:06.621017 kernel: audit: type=1131 audit(1712946066.610:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.604733 systemd[1]: Stopped target remote-cryptsetup.target. Apr 12 18:21:06.607048 systemd[1]: Stopped target timers.target. Apr 12 18:21:06.609094 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Apr 12 18:21:06.609389 systemd[1]: Stopped dracut-pre-pivot.service. Apr 12 18:21:06.619058 systemd[1]: Stopped target initrd.target. Apr 12 18:21:06.621801 systemd[1]: Stopped target basic.target. Apr 12 18:21:06.634497 systemd[1]: Stopped target ignition-complete.target. Apr 12 18:21:06.638938 systemd[1]: Stopped target ignition-diskful.target. Apr 12 18:21:06.643327 systemd[1]: Stopped target initrd-root-device.target. Apr 12 18:21:06.647819 systemd[1]: Stopped target remote-fs.target. Apr 12 18:21:06.651745 systemd[1]: Stopped target remote-fs-pre.target. Apr 12 18:21:06.656026 systemd[1]: Stopped target sysinit.target. Apr 12 18:21:06.659965 systemd[1]: Stopped target local-fs.target. Apr 12 18:21:06.663865 systemd[1]: Stopped target local-fs-pre.target. Apr 12 18:21:06.667989 systemd[1]: Stopped target swap.target. Apr 12 18:21:06.671670 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Apr 12 18:21:06.672068 systemd[1]: Stopped dracut-pre-mount.service. Apr 12 18:21:06.676000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.686104 systemd[1]: Stopped target cryptsetup.target. Apr 12 18:21:06.688250 kernel: audit: type=1131 audit(1712946066.676:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.690414 systemd[1]: dracut-initqueue.service: Deactivated successfully. Apr 12 18:21:06.693231 systemd[1]: Stopped dracut-initqueue.service. Apr 12 18:21:06.695000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.697373 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Apr 12 18:21:06.709570 kernel: audit: type=1131 audit(1712946066.695:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.697646 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Apr 12 18:21:06.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.712238 systemd[1]: ignition-files.service: Deactivated successfully. Apr 12 18:21:06.714792 systemd[1]: Stopped ignition-files.service. Apr 12 18:21:06.717000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.720531 systemd[1]: Stopping ignition-mount.service... Apr 12 18:21:06.745963 ignition[1337]: INFO : Ignition 2.14.0 Apr 12 18:21:06.745963 ignition[1337]: INFO : Stage: umount Apr 12 18:21:06.745963 ignition[1337]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:21:06.745963 ignition[1337]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Apr 12 18:21:06.769523 iscsid[1149]: iscsid shutting down. Apr 12 18:21:06.771000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.784000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.748384 systemd[1]: Stopping iscsid.service... Apr 12 18:21:06.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.801967 ignition[1337]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Apr 12 18:21:06.801967 ignition[1337]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Apr 12 18:21:06.801967 ignition[1337]: INFO : PUT result: OK Apr 12 18:21:06.801967 ignition[1337]: INFO : umount: umount passed Apr 12 18:21:06.801967 ignition[1337]: INFO : Ignition finished successfully Apr 12 18:21:06.753471 systemd[1]: Stopping sysroot-boot.service... Apr 12 18:21:06.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.769491 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Apr 12 18:21:06.769835 systemd[1]: Stopped systemd-udev-trigger.service. Apr 12 18:21:06.773549 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Apr 12 18:21:06.774480 systemd[1]: Stopped dracut-pre-trigger.service. Apr 12 18:21:06.779963 systemd[1]: iscsid.service: Deactivated successfully. Apr 12 18:21:06.780146 systemd[1]: Stopped iscsid.service. Apr 12 18:21:06.782875 systemd[1]: ignition-mount.service: Deactivated successfully. Apr 12 18:21:06.783041 systemd[1]: Stopped ignition-mount.service. Apr 12 18:21:06.786705 systemd[1]: ignition-disks.service: Deactivated successfully. Apr 12 18:21:06.786905 systemd[1]: Stopped ignition-disks.service. Apr 12 18:21:06.789453 systemd[1]: ignition-kargs.service: Deactivated successfully. Apr 12 18:21:06.789943 systemd[1]: Stopped ignition-kargs.service. Apr 12 18:21:06.792334 systemd[1]: ignition-fetch.service: Deactivated successfully. Apr 12 18:21:06.792427 systemd[1]: Stopped ignition-fetch.service. Apr 12 18:21:06.800055 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Apr 12 18:21:06.800152 systemd[1]: Stopped ignition-fetch-offline.service. Apr 12 18:21:06.816160 systemd[1]: Stopped target paths.target. Apr 12 18:21:06.817875 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Apr 12 18:21:06.861589 systemd[1]: Stopped systemd-ask-password-console.path. Apr 12 18:21:06.863521 systemd[1]: Stopped target slices.target. Apr 12 18:21:06.865076 systemd[1]: Stopped target sockets.target. Apr 12 18:21:06.880040 systemd[1]: iscsid.socket: Deactivated successfully. Apr 12 18:21:06.883067 systemd[1]: Closed iscsid.socket. Apr 12 18:21:06.890467 systemd[1]: ignition-setup.service: Deactivated successfully. Apr 12 18:21:06.890614 systemd[1]: Stopped ignition-setup.service. Apr 12 18:21:06.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.897766 systemd[1]: Stopping iscsiuio.service... Apr 12 18:21:06.903133 systemd[1]: sysroot-boot.mount: Deactivated successfully. Apr 12 18:21:06.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.904221 systemd[1]: initrd-cleanup.service: Deactivated successfully. Apr 12 18:21:06.904402 systemd[1]: Finished initrd-cleanup.service. Apr 12 18:21:06.913000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.906923 systemd[1]: sysroot-boot.service: Deactivated successfully. Apr 12 18:21:06.907080 systemd[1]: Stopped sysroot-boot.service. Apr 12 18:21:06.910316 systemd[1]: initrd-setup-root.service: Deactivated successfully. Apr 12 18:21:06.910410 systemd[1]: Stopped initrd-setup-root.service. Apr 12 18:21:06.931286 systemd[1]: iscsiuio.service: Deactivated successfully. Apr 12 18:21:06.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.931484 systemd[1]: Stopped iscsiuio.service. Apr 12 18:21:06.931851 systemd[1]: Stopped target network.target. Apr 12 18:21:06.937227 systemd[1]: iscsiuio.socket: Deactivated successfully. Apr 12 18:21:06.937303 systemd[1]: Closed iscsiuio.socket. Apr 12 18:21:06.955000 audit: BPF prog-id=6 op=UNLOAD Apr 12 18:21:06.939417 systemd[1]: Stopping systemd-networkd.service... Apr 12 18:21:06.941634 systemd[1]: Stopping systemd-resolved.service... Apr 12 18:21:06.952275 systemd[1]: systemd-resolved.service: Deactivated successfully. Apr 12 18:21:06.952475 systemd[1]: Stopped systemd-resolved.service. Apr 12 18:21:06.954695 systemd-networkd[1144]: eth0: DHCPv6 lease lost Apr 12 18:21:06.969000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.973187 systemd[1]: systemd-networkd.service: Deactivated successfully. Apr 12 18:21:06.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:06.973000 audit: BPF prog-id=9 op=UNLOAD Apr 12 18:21:06.973393 systemd[1]: Stopped systemd-networkd.service. Apr 12 18:21:06.973979 systemd[1]: systemd-networkd.socket: Deactivated successfully. Apr 12 18:21:06.974056 systemd[1]: Closed systemd-networkd.socket. Apr 12 18:21:06.989492 systemd[1]: Stopping network-cleanup.service... Apr 12 18:21:06.993606 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Apr 12 18:21:06.998938 systemd[1]: Stopped parse-ip-for-networkd.service. Apr 12 18:21:07.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:07.003570 systemd[1]: systemd-sysctl.service: Deactivated successfully. Apr 12 18:21:07.006230 systemd[1]: Stopped systemd-sysctl.service. Apr 12 18:21:07.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:07.010560 systemd[1]: systemd-modules-load.service: Deactivated successfully. Apr 12 18:21:07.013458 systemd[1]: Stopped systemd-modules-load.service. Apr 12 18:21:07.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:07.018236 systemd[1]: Stopping systemd-udevd.service... Apr 12 18:21:07.024043 systemd[1]: systemd-udevd.service: Deactivated successfully. Apr 12 18:21:07.027105 systemd[1]: Stopped systemd-udevd.service. Apr 12 18:21:07.029000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:07.033403 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Apr 12 18:21:07.033706 systemd[1]: Closed systemd-udevd-control.socket. Apr 12 18:21:07.037737 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Apr 12 18:21:07.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:07.042000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:07.042000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:07.044000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:07.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:07.037821 systemd[1]: Closed systemd-udevd-kernel.socket. Apr 12 18:21:07.042963 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Apr 12 18:21:07.062000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:07.065000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:07.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:07.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:07.043054 systemd[1]: Stopped dracut-pre-udev.service. Apr 12 18:21:07.043352 systemd[1]: dracut-cmdline.service: Deactivated successfully. Apr 12 18:21:07.043428 systemd[1]: Stopped dracut-cmdline.service. Apr 12 18:21:07.044047 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Apr 12 18:21:07.044121 systemd[1]: Stopped dracut-cmdline-ask.service. Apr 12 18:21:07.045705 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Apr 12 18:21:07.046040 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Apr 12 18:21:07.046146 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Apr 12 18:21:07.128671 systemd-journald[269]: Received SIGTERM from PID 1 (n/a). Apr 12 18:21:07.055776 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Apr 12 18:21:07.055878 systemd[1]: Stopped kmod-static-nodes.service. Apr 12 18:21:07.058279 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Apr 12 18:21:07.058363 systemd[1]: Stopped systemd-vconsole-setup.service. Apr 12 18:21:07.065089 systemd[1]: network-cleanup.service: Deactivated successfully. Apr 12 18:21:07.065277 systemd[1]: Stopped network-cleanup.service. Apr 12 18:21:07.067774 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Apr 12 18:21:07.067932 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Apr 12 18:21:07.070515 systemd[1]: Reached target initrd-switch-root.target. Apr 12 18:21:07.074059 systemd[1]: Starting initrd-switch-root.service... Apr 12 18:21:07.090605 systemd[1]: Switching root. Apr 12 18:21:07.143127 systemd-journald[269]: Journal stopped Apr 12 18:21:12.653709 kernel: SELinux: Class mctp_socket not defined in policy. Apr 12 18:21:12.653821 kernel: SELinux: Class anon_inode not defined in policy. Apr 12 18:21:12.653855 kernel: SELinux: the above unknown classes and permissions will be allowed Apr 12 18:21:12.653890 kernel: SELinux: policy capability network_peer_controls=1 Apr 12 18:21:12.653921 kernel: SELinux: policy capability open_perms=1 Apr 12 18:21:12.653952 kernel: SELinux: policy capability extended_socket_class=1 Apr 12 18:21:12.653983 kernel: SELinux: policy capability always_check_network=0 Apr 12 18:21:12.654013 kernel: SELinux: policy capability cgroup_seclabel=1 Apr 12 18:21:12.654044 kernel: SELinux: policy capability nnp_nosuid_transition=1 Apr 12 18:21:12.654075 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Apr 12 18:21:12.654104 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Apr 12 18:21:12.654140 systemd[1]: Successfully loaded SELinux policy in 125.305ms. Apr 12 18:21:12.654202 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.877ms. Apr 12 18:21:12.654244 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Apr 12 18:21:12.654278 systemd[1]: Detected virtualization amazon. Apr 12 18:21:12.654309 systemd[1]: Detected architecture arm64. Apr 12 18:21:12.654342 systemd[1]: Detected first boot. Apr 12 18:21:12.654375 systemd[1]: Initializing machine ID from VM UUID. Apr 12 18:21:12.654404 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Apr 12 18:21:12.654443 systemd[1]: Populated /etc with preset unit settings. Apr 12 18:21:12.654478 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Apr 12 18:21:12.654549 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Apr 12 18:21:12.654589 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Apr 12 18:21:12.654622 kernel: kauditd_printk_skb: 49 callbacks suppressed Apr 12 18:21:12.654651 kernel: audit: type=1334 audit(1712946072.223:86): prog-id=12 op=LOAD Apr 12 18:21:12.654680 kernel: audit: type=1334 audit(1712946072.223:87): prog-id=3 op=UNLOAD Apr 12 18:21:12.654712 kernel: audit: type=1334 audit(1712946072.223:88): prog-id=13 op=LOAD Apr 12 18:21:12.654754 systemd[1]: initrd-switch-root.service: Deactivated successfully. Apr 12 18:21:12.654786 kernel: audit: type=1334 audit(1712946072.223:89): prog-id=14 op=LOAD Apr 12 18:21:12.654817 systemd[1]: Stopped initrd-switch-root.service. Apr 12 18:21:12.654847 kernel: audit: type=1334 audit(1712946072.223:90): prog-id=4 op=UNLOAD Apr 12 18:21:12.654877 kernel: audit: type=1334 audit(1712946072.223:91): prog-id=5 op=UNLOAD Apr 12 18:21:12.654907 kernel: audit: type=1334 audit(1712946072.226:92): prog-id=15 op=LOAD Apr 12 18:21:12.654937 kernel: audit: type=1334 audit(1712946072.226:93): prog-id=12 op=UNLOAD Apr 12 18:21:12.654969 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Apr 12 18:21:12.655001 kernel: audit: type=1334 audit(1712946072.228:94): prog-id=16 op=LOAD Apr 12 18:21:12.655034 systemd[1]: Created slice system-addon\x2dconfig.slice. Apr 12 18:21:12.655063 kernel: audit: type=1334 audit(1712946072.231:95): prog-id=17 op=LOAD Apr 12 18:21:12.655094 systemd[1]: Created slice system-addon\x2drun.slice. Apr 12 18:21:12.655125 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Apr 12 18:21:12.655161 systemd[1]: Created slice system-getty.slice. Apr 12 18:21:12.655191 systemd[1]: Created slice system-modprobe.slice. Apr 12 18:21:12.655222 systemd[1]: Created slice system-serial\x2dgetty.slice. Apr 12 18:21:12.655256 systemd[1]: Created slice system-system\x2dcloudinit.slice. Apr 12 18:21:12.655288 systemd[1]: Created slice system-systemd\x2dfsck.slice. Apr 12 18:21:12.655319 systemd[1]: Created slice user.slice. Apr 12 18:21:12.655350 systemd[1]: Started systemd-ask-password-console.path. Apr 12 18:21:12.655380 systemd[1]: Started systemd-ask-password-wall.path. Apr 12 18:21:12.655409 systemd[1]: Set up automount boot.automount. Apr 12 18:21:12.655439 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Apr 12 18:21:12.655468 systemd[1]: Stopped target initrd-switch-root.target. Apr 12 18:21:12.655569 systemd[1]: Stopped target initrd-fs.target. Apr 12 18:21:12.655615 systemd[1]: Stopped target initrd-root-fs.target. Apr 12 18:21:12.655658 systemd[1]: Reached target integritysetup.target. Apr 12 18:21:12.655691 systemd[1]: Reached target remote-cryptsetup.target. Apr 12 18:21:12.655723 systemd[1]: Reached target remote-fs.target. Apr 12 18:21:12.655753 systemd[1]: Reached target slices.target. Apr 12 18:21:12.655782 systemd[1]: Reached target swap.target. Apr 12 18:21:12.655812 systemd[1]: Reached target torcx.target. Apr 12 18:21:12.655845 systemd[1]: Reached target veritysetup.target. Apr 12 18:21:12.655875 systemd[1]: Listening on systemd-coredump.socket. Apr 12 18:21:12.656434 systemd[1]: Listening on systemd-initctl.socket. Apr 12 18:21:12.656471 systemd[1]: Listening on systemd-networkd.socket. Apr 12 18:21:12.656530 systemd[1]: Listening on systemd-udevd-control.socket. Apr 12 18:21:12.656569 systemd[1]: Listening on systemd-udevd-kernel.socket. Apr 12 18:21:12.656599 systemd[1]: Listening on systemd-userdbd.socket. Apr 12 18:21:12.656629 systemd[1]: Mounting dev-hugepages.mount... Apr 12 18:21:12.656661 systemd[1]: Mounting dev-mqueue.mount... Apr 12 18:21:12.656694 systemd[1]: Mounting media.mount... Apr 12 18:21:12.656725 systemd[1]: Mounting sys-kernel-debug.mount... Apr 12 18:21:12.656754 systemd[1]: Mounting sys-kernel-tracing.mount... Apr 12 18:21:12.656788 systemd[1]: Mounting tmp.mount... Apr 12 18:21:12.656819 systemd[1]: Starting flatcar-tmpfiles.service... Apr 12 18:21:12.656849 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Apr 12 18:21:12.656882 systemd[1]: Starting kmod-static-nodes.service... Apr 12 18:21:12.656912 systemd[1]: Starting modprobe@configfs.service... Apr 12 18:21:12.656945 systemd[1]: Starting modprobe@dm_mod.service... Apr 12 18:21:12.656974 systemd[1]: Starting modprobe@drm.service... Apr 12 18:21:12.657003 systemd[1]: Starting modprobe@efi_pstore.service... Apr 12 18:21:12.657034 systemd[1]: Starting modprobe@fuse.service... Apr 12 18:21:12.657067 systemd[1]: Starting modprobe@loop.service... Apr 12 18:21:12.657098 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Apr 12 18:21:12.657128 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Apr 12 18:21:12.657159 systemd[1]: Stopped systemd-fsck-root.service. Apr 12 18:21:12.657188 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Apr 12 18:21:12.657221 systemd[1]: Stopped systemd-fsck-usr.service. Apr 12 18:21:12.657250 systemd[1]: Stopped systemd-journald.service. Apr 12 18:21:12.657280 systemd[1]: Starting systemd-journald.service... Apr 12 18:21:12.657311 systemd[1]: Starting systemd-modules-load.service... Apr 12 18:21:12.657352 kernel: fuse: init (API version 7.34) Apr 12 18:21:12.657382 systemd[1]: Starting systemd-network-generator.service... Apr 12 18:21:12.657411 systemd[1]: Starting systemd-remount-fs.service... Apr 12 18:21:12.657443 kernel: loop: module loaded Apr 12 18:21:12.657474 systemd[1]: Starting systemd-udev-trigger.service... Apr 12 18:21:12.657520 systemd[1]: verity-setup.service: Deactivated successfully. Apr 12 18:21:12.657555 systemd[1]: Stopped verity-setup.service. Apr 12 18:21:12.657585 systemd[1]: Mounted dev-hugepages.mount. Apr 12 18:21:12.657614 systemd[1]: Mounted dev-mqueue.mount. Apr 12 18:21:12.657648 systemd[1]: Mounted media.mount. Apr 12 18:21:12.657677 systemd[1]: Mounted sys-kernel-debug.mount. Apr 12 18:21:12.657706 systemd[1]: Mounted sys-kernel-tracing.mount. Apr 12 18:21:12.657737 systemd[1]: Mounted tmp.mount. Apr 12 18:21:12.657770 systemd[1]: Finished kmod-static-nodes.service. Apr 12 18:21:12.657811 systemd[1]: modprobe@configfs.service: Deactivated successfully. Apr 12 18:21:12.657842 systemd[1]: Finished modprobe@configfs.service. Apr 12 18:21:12.657871 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Apr 12 18:21:12.657904 systemd[1]: Finished modprobe@dm_mod.service. Apr 12 18:21:12.657936 systemd[1]: modprobe@drm.service: Deactivated successfully. Apr 12 18:21:12.657973 systemd[1]: Finished modprobe@drm.service. Apr 12 18:21:12.658436 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Apr 12 18:21:12.658480 systemd[1]: Finished modprobe@efi_pstore.service. Apr 12 18:21:12.658557 systemd-journald[1449]: Journal started Apr 12 18:21:12.658652 systemd-journald[1449]: Runtime Journal (/run/log/journal/ec24a4306543564d73029e45119a8933) is 8.0M, max 75.4M, 67.4M free. Apr 12 18:21:07.981000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Apr 12 18:21:08.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Apr 12 18:21:08.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Apr 12 18:21:08.169000 audit: BPF prog-id=10 op=LOAD Apr 12 18:21:08.169000 audit: BPF prog-id=10 op=UNLOAD Apr 12 18:21:08.169000 audit: BPF prog-id=11 op=LOAD Apr 12 18:21:08.169000 audit: BPF prog-id=11 op=UNLOAD Apr 12 18:21:08.372000 audit[1370]: AVC avc: denied { associate } for pid=1370 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Apr 12 18:21:08.372000 audit[1370]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001458ac a1=40000c6de0 a2=40000cd0c0 a3=32 items=0 ppid=1353 pid=1370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:08.372000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Apr 12 18:21:08.376000 audit[1370]: AVC avc: denied { associate } for pid=1370 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Apr 12 18:21:08.376000 audit[1370]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145989 a2=1ed a3=0 items=2 ppid=1353 pid=1370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:08.376000 audit: CWD cwd="/" Apr 12 18:21:08.376000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:21:08.376000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:21:08.376000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Apr 12 18:21:12.223000 audit: BPF prog-id=12 op=LOAD Apr 12 18:21:12.223000 audit: BPF prog-id=3 op=UNLOAD Apr 12 18:21:12.223000 audit: BPF prog-id=13 op=LOAD Apr 12 18:21:12.223000 audit: BPF prog-id=14 op=LOAD Apr 12 18:21:12.223000 audit: BPF prog-id=4 op=UNLOAD Apr 12 18:21:12.223000 audit: BPF prog-id=5 op=UNLOAD Apr 12 18:21:12.226000 audit: BPF prog-id=15 op=LOAD Apr 12 18:21:12.226000 audit: BPF prog-id=12 op=UNLOAD Apr 12 18:21:12.228000 audit: BPF prog-id=16 op=LOAD Apr 12 18:21:12.231000 audit: BPF prog-id=17 op=LOAD Apr 12 18:21:12.231000 audit: BPF prog-id=13 op=UNLOAD Apr 12 18:21:12.231000 audit: BPF prog-id=14 op=UNLOAD Apr 12 18:21:12.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.247000 audit: BPF prog-id=15 op=UNLOAD Apr 12 18:21:12.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.539000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.540000 audit: BPF prog-id=18 op=LOAD Apr 12 18:21:12.541000 audit: BPF prog-id=19 op=LOAD Apr 12 18:21:12.541000 audit: BPF prog-id=20 op=LOAD Apr 12 18:21:12.541000 audit: BPF prog-id=16 op=UNLOAD Apr 12 18:21:12.541000 audit: BPF prog-id=17 op=UNLOAD Apr 12 18:21:12.590000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.650000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Apr 12 18:21:12.650000 audit[1449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffeb382120 a2=4000 a3=1 items=0 ppid=1 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:12.650000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Apr 12 18:21:12.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.660000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:08.359253 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.3 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.3 /var/lib/torcx/store]" Apr 12 18:21:12.222497 systemd[1]: Queued start job for default target multi-user.target. Apr 12 18:21:12.666455 systemd[1]: Started systemd-journald.service. Apr 12 18:21:12.664000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:08.359998 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Apr 12 18:21:12.234901 systemd[1]: systemd-journald.service: Deactivated successfully. Apr 12 18:21:08.360052 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Apr 12 18:21:12.666910 systemd[1]: modprobe@fuse.service: Deactivated successfully. Apr 12 18:21:08.360162 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Apr 12 18:21:12.667189 systemd[1]: Finished modprobe@fuse.service. Apr 12 18:21:08.360188 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=debug msg="skipped missing lower profile" missing profile=oem Apr 12 18:21:08.360246 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Apr 12 18:21:12.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:08.360276 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Apr 12 18:21:08.360734 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Apr 12 18:21:08.360811 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Apr 12 18:21:08.360846 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Apr 12 18:21:12.670444 systemd[1]: modprobe@loop.service: Deactivated successfully. Apr 12 18:21:12.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:08.362660 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Apr 12 18:21:12.670757 systemd[1]: Finished modprobe@loop.service. Apr 12 18:21:08.362736 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Apr 12 18:21:08.362780 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.3: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.3 Apr 12 18:21:08.362820 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Apr 12 18:21:12.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.673910 systemd[1]: Finished systemd-modules-load.service. Apr 12 18:21:08.362864 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.3: no such file or directory" path=/var/lib/torcx/store/3510.3.3 Apr 12 18:21:08.362902 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:08Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Apr 12 18:21:12.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:11.337436 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:11Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Apr 12 18:21:12.676949 systemd[1]: Finished systemd-network-generator.service. Apr 12 18:21:11.337976 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:11Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Apr 12 18:21:12.680030 systemd[1]: Finished systemd-remount-fs.service. Apr 12 18:21:11.338216 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:11Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Apr 12 18:21:12.683089 systemd[1]: Reached target network-pre.target. Apr 12 18:21:11.338674 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:11Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Apr 12 18:21:12.687559 systemd[1]: Mounting sys-fs-fuse-connections.mount... Apr 12 18:21:11.338775 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:11Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Apr 12 18:21:12.692075 systemd[1]: Mounting sys-kernel-config.mount... Apr 12 18:21:11.338910 /usr/lib/systemd/system-generators/torcx-generator[1370]: time="2024-04-12T18:21:11Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Apr 12 18:21:12.698118 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Apr 12 18:21:12.702192 systemd[1]: Starting systemd-hwdb-update.service... Apr 12 18:21:12.707124 systemd[1]: Starting systemd-journal-flush.service... Apr 12 18:21:12.709430 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Apr 12 18:21:12.711725 systemd[1]: Starting systemd-random-seed.service... Apr 12 18:21:12.713741 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Apr 12 18:21:12.744262 systemd-journald[1449]: Time spent on flushing to /var/log/journal/ec24a4306543564d73029e45119a8933 is 71.600ms for 1167 entries. Apr 12 18:21:12.744262 systemd-journald[1449]: System Journal (/var/log/journal/ec24a4306543564d73029e45119a8933) is 8.0M, max 195.6M, 187.6M free. Apr 12 18:21:12.838090 systemd-journald[1449]: Received client request to flush runtime journal. Apr 12 18:21:12.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.727083 systemd[1]: Starting systemd-sysctl.service... Apr 12 18:21:12.732002 systemd[1]: Mounted sys-fs-fuse-connections.mount. Apr 12 18:21:12.734530 systemd[1]: Mounted sys-kernel-config.mount. Apr 12 18:21:12.751133 systemd[1]: Finished systemd-random-seed.service. Apr 12 18:21:12.753406 systemd[1]: Reached target first-boot-complete.target. Apr 12 18:21:12.790295 systemd[1]: Finished systemd-sysctl.service. Apr 12 18:21:12.839601 systemd[1]: Finished systemd-journal-flush.service. Apr 12 18:21:12.871325 systemd[1]: Finished flatcar-tmpfiles.service. Apr 12 18:21:12.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.875873 systemd[1]: Starting systemd-sysusers.service... Apr 12 18:21:12.921760 systemd[1]: Finished systemd-udev-trigger.service. Apr 12 18:21:12.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:12.926673 systemd[1]: Starting systemd-udev-settle.service... Apr 12 18:21:12.944384 udevadm[1489]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Apr 12 18:21:13.030288 systemd[1]: Finished systemd-sysusers.service. Apr 12 18:21:13.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:13.034971 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Apr 12 18:21:13.130707 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Apr 12 18:21:13.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:13.758653 systemd[1]: Finished systemd-hwdb-update.service. Apr 12 18:21:13.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:13.762000 audit: BPF prog-id=21 op=LOAD Apr 12 18:21:13.762000 audit: BPF prog-id=22 op=LOAD Apr 12 18:21:13.762000 audit: BPF prog-id=7 op=UNLOAD Apr 12 18:21:13.762000 audit: BPF prog-id=8 op=UNLOAD Apr 12 18:21:13.765130 systemd[1]: Starting systemd-udevd.service... Apr 12 18:21:13.805751 systemd-udevd[1492]: Using default interface naming scheme 'v252'. Apr 12 18:21:13.861028 systemd[1]: Started systemd-udevd.service. Apr 12 18:21:13.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:13.863000 audit: BPF prog-id=23 op=LOAD Apr 12 18:21:13.867866 systemd[1]: Starting systemd-networkd.service... Apr 12 18:21:13.883000 audit: BPF prog-id=24 op=LOAD Apr 12 18:21:13.883000 audit: BPF prog-id=25 op=LOAD Apr 12 18:21:13.883000 audit: BPF prog-id=26 op=LOAD Apr 12 18:21:13.886368 systemd[1]: Starting systemd-userdbd.service... Apr 12 18:21:13.945148 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Apr 12 18:21:13.959056 (udev-worker)[1504]: Network interface NamePolicy= disabled on kernel command line. Apr 12 18:21:13.984400 systemd[1]: Started systemd-userdbd.service. Apr 12 18:21:13.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:14.140656 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1507) Apr 12 18:21:14.150590 systemd-networkd[1498]: lo: Link UP Apr 12 18:21:14.150606 systemd-networkd[1498]: lo: Gained carrier Apr 12 18:21:14.151482 systemd-networkd[1498]: Enumeration completed Apr 12 18:21:14.151679 systemd[1]: Started systemd-networkd.service. Apr 12 18:21:14.152823 systemd-networkd[1498]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Apr 12 18:21:14.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:14.157754 systemd[1]: Starting systemd-networkd-wait-online.service... Apr 12 18:21:14.168586 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Apr 12 18:21:14.169308 systemd-networkd[1498]: eth0: Link UP Apr 12 18:21:14.169610 systemd-networkd[1498]: eth0: Gained carrier Apr 12 18:21:14.202768 systemd-networkd[1498]: eth0: DHCPv4 address 172.31.30.133/20, gateway 172.31.16.1 acquired from 172.31.16.1 Apr 12 18:21:14.325830 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Apr 12 18:21:14.329246 systemd[1]: Finished systemd-udev-settle.service. Apr 12 18:21:14.333852 systemd[1]: Starting lvm2-activation-early.service... Apr 12 18:21:14.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:14.393428 lvm[1611]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Apr 12 18:21:14.433204 systemd[1]: Finished lvm2-activation-early.service. Apr 12 18:21:14.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:14.436091 systemd[1]: Reached target cryptsetup.target. Apr 12 18:21:14.440928 systemd[1]: Starting lvm2-activation.service... Apr 12 18:21:14.450328 lvm[1612]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Apr 12 18:21:14.484165 systemd[1]: Finished lvm2-activation.service. Apr 12 18:21:14.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:14.486640 systemd[1]: Reached target local-fs-pre.target. Apr 12 18:21:14.488875 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Apr 12 18:21:14.488932 systemd[1]: Reached target local-fs.target. Apr 12 18:21:14.490926 systemd[1]: Reached target machines.target. Apr 12 18:21:14.495067 systemd[1]: Starting ldconfig.service... Apr 12 18:21:14.497386 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Apr 12 18:21:14.497549 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Apr 12 18:21:14.499871 systemd[1]: Starting systemd-boot-update.service... Apr 12 18:21:14.504486 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Apr 12 18:21:14.509934 systemd[1]: Starting systemd-machine-id-commit.service... Apr 12 18:21:14.512477 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Apr 12 18:21:14.512672 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Apr 12 18:21:14.516383 systemd[1]: Starting systemd-tmpfiles-setup.service... Apr 12 18:21:14.533111 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1614 (bootctl) Apr 12 18:21:14.535299 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Apr 12 18:21:14.559764 systemd-tmpfiles[1617]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Apr 12 18:21:14.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:14.561595 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Apr 12 18:21:14.580266 systemd-tmpfiles[1617]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Apr 12 18:21:14.605222 systemd-tmpfiles[1617]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Apr 12 18:21:14.654659 systemd-fsck[1622]: fsck.fat 4.2 (2021-01-31) Apr 12 18:21:14.654659 systemd-fsck[1622]: /dev/nvme0n1p1: 236 files, 117047/258078 clusters Apr 12 18:21:14.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:14.657713 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Apr 12 18:21:14.663171 systemd[1]: Mounting boot.mount... Apr 12 18:21:14.685682 systemd[1]: Mounted boot.mount. Apr 12 18:21:14.711258 systemd[1]: Finished systemd-boot-update.service. Apr 12 18:21:14.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:14.952320 systemd[1]: Finished systemd-tmpfiles-setup.service. Apr 12 18:21:14.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:14.957390 systemd[1]: Starting audit-rules.service... Apr 12 18:21:14.968052 systemd[1]: Starting clean-ca-certificates.service... Apr 12 18:21:14.973640 systemd[1]: Starting systemd-journal-catalog-update.service... Apr 12 18:21:14.976000 audit: BPF prog-id=27 op=LOAD Apr 12 18:21:14.979956 systemd[1]: Starting systemd-resolved.service... Apr 12 18:21:14.983000 audit: BPF prog-id=28 op=LOAD Apr 12 18:21:14.986672 systemd[1]: Starting systemd-timesyncd.service... Apr 12 18:21:14.993068 systemd[1]: Starting systemd-update-utmp.service... Apr 12 18:21:15.011710 systemd[1]: Finished clean-ca-certificates.service. Apr 12 18:21:15.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:15.016001 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Apr 12 18:21:15.032000 audit[1644]: SYSTEM_BOOT pid=1644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Apr 12 18:21:15.036113 systemd[1]: Finished systemd-update-utmp.service. Apr 12 18:21:15.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:15.069239 systemd[1]: Finished systemd-journal-catalog-update.service. Apr 12 18:21:15.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:15.116000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Apr 12 18:21:15.116000 audit[1656]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe5292100 a2=420 a3=0 items=0 ppid=1636 pid=1656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:15.116000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Apr 12 18:21:15.118093 augenrules[1656]: No rules Apr 12 18:21:15.119116 systemd[1]: Finished audit-rules.service. Apr 12 18:21:15.155858 systemd[1]: Started systemd-timesyncd.service. Apr 12 18:21:15.160227 systemd[1]: Reached target time-set.target. Apr 12 18:21:15.169447 systemd-resolved[1640]: Positive Trust Anchors: Apr 12 18:21:15.169491 systemd-resolved[1640]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Apr 12 18:21:15.169589 systemd-resolved[1640]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Apr 12 18:21:15.217953 systemd-resolved[1640]: Defaulting to hostname 'linux'. Apr 12 18:21:15.220904 systemd[1]: Started systemd-resolved.service. Apr 12 18:21:15.223611 systemd[1]: Reached target network.target. Apr 12 18:21:15.226723 systemd[1]: Reached target nss-lookup.target. Apr 12 18:21:15.255730 systemd-networkd[1498]: eth0: Gained IPv6LL Apr 12 18:21:15.258454 systemd[1]: Finished systemd-networkd-wait-online.service. Apr 12 18:21:15.261341 systemd[1]: Reached target network-online.target. Apr 12 18:21:15.403205 systemd-timesyncd[1641]: Contacted time server 152.70.159.102:123 (0.flatcar.pool.ntp.org). Apr 12 18:21:15.403967 systemd-timesyncd[1641]: Initial clock synchronization to Fri 2024-04-12 18:21:15.056164 UTC. Apr 12 18:21:15.627164 ldconfig[1613]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Apr 12 18:21:15.737184 systemd[1]: Finished ldconfig.service. Apr 12 18:21:15.741899 systemd[1]: Starting systemd-update-done.service... Apr 12 18:21:15.766982 systemd[1]: Finished systemd-update-done.service. Apr 12 18:21:15.769551 systemd[1]: Reached target sysinit.target. Apr 12 18:21:15.771748 systemd[1]: Started motdgen.path. Apr 12 18:21:15.773644 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Apr 12 18:21:15.776682 systemd[1]: Started logrotate.timer. Apr 12 18:21:15.778654 systemd[1]: Started mdadm.timer. Apr 12 18:21:15.780360 systemd[1]: Started systemd-tmpfiles-clean.timer. Apr 12 18:21:15.782472 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Apr 12 18:21:15.782542 systemd[1]: Reached target paths.target. Apr 12 18:21:15.784328 systemd[1]: Reached target timers.target. Apr 12 18:21:15.786996 systemd[1]: Listening on dbus.socket. Apr 12 18:21:15.790775 systemd[1]: Starting docker.socket... Apr 12 18:21:15.798655 systemd[1]: Listening on sshd.socket. Apr 12 18:21:15.800891 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Apr 12 18:21:15.801805 systemd[1]: Listening on docker.socket. Apr 12 18:21:15.803895 systemd[1]: Reached target sockets.target. Apr 12 18:21:15.805908 systemd[1]: Reached target basic.target. Apr 12 18:21:15.807846 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Apr 12 18:21:15.807899 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Apr 12 18:21:15.809985 systemd[1]: Started amazon-ssm-agent.service. Apr 12 18:21:15.816220 systemd[1]: Starting containerd.service... Apr 12 18:21:15.823071 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Apr 12 18:21:15.838890 systemd[1]: Starting dbus.service... Apr 12 18:21:15.847681 systemd[1]: Starting enable-oem-cloudinit.service... Apr 12 18:21:15.857232 systemd[1]: Starting extend-filesystems.service... Apr 12 18:21:15.859327 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Apr 12 18:21:15.912939 jq[1671]: false Apr 12 18:21:15.862037 systemd[1]: Starting motdgen.service... Apr 12 18:21:15.867363 systemd[1]: Started nvidia.service. Apr 12 18:21:15.879070 systemd[1]: Starting prepare-cni-plugins.service... Apr 12 18:21:15.888144 systemd[1]: Starting prepare-critools.service... Apr 12 18:21:15.897801 systemd[1]: Starting prepare-helm.service... Apr 12 18:21:15.903837 systemd[1]: Starting ssh-key-proc-cmdline.service... Apr 12 18:21:15.908472 systemd[1]: Starting sshd-keygen.service... Apr 12 18:21:15.931830 systemd[1]: Starting systemd-logind.service... Apr 12 18:21:15.935959 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Apr 12 18:21:15.936096 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Apr 12 18:21:15.940468 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Apr 12 18:21:15.942910 systemd[1]: Starting update-engine.service... Apr 12 18:21:16.051178 tar[1685]: linux-arm64/helm Apr 12 18:21:15.948027 systemd[1]: Starting update-ssh-keys-after-ignition.service... Apr 12 18:21:16.055981 tar[1687]: crictl Apr 12 18:21:15.997726 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Apr 12 18:21:16.056652 jq[1683]: true Apr 12 18:21:15.998093 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Apr 12 18:21:16.007641 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Apr 12 18:21:16.057360 tar[1686]: ./ Apr 12 18:21:16.057360 tar[1686]: ./loopback Apr 12 18:21:16.007963 systemd[1]: Finished ssh-key-proc-cmdline.service. Apr 12 18:21:16.099937 jq[1691]: true Apr 12 18:21:16.141934 dbus-daemon[1670]: [system] SELinux support is enabled Apr 12 18:21:16.144702 systemd[1]: Started dbus.service. Apr 12 18:21:16.151024 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Apr 12 18:21:16.151085 systemd[1]: Reached target system-config.target. Apr 12 18:21:16.154936 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Apr 12 18:21:16.154972 systemd[1]: Reached target user-config.target. Apr 12 18:21:16.189604 extend-filesystems[1672]: Found nvme0n1 Apr 12 18:21:16.201910 extend-filesystems[1672]: Found nvme0n1p1 Apr 12 18:21:16.209805 extend-filesystems[1672]: Found nvme0n1p2 Apr 12 18:21:16.215725 extend-filesystems[1672]: Found nvme0n1p3 Apr 12 18:21:16.219473 dbus-daemon[1670]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.0' (uid=244 pid=1498 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Apr 12 18:21:16.219730 extend-filesystems[1672]: Found usr Apr 12 18:21:16.220128 systemd[1]: motdgen.service: Deactivated successfully. Apr 12 18:21:16.220428 systemd[1]: Finished motdgen.service. Apr 12 18:21:16.223387 extend-filesystems[1672]: Found nvme0n1p4 Apr 12 18:21:16.233530 dbus-daemon[1670]: [system] Successfully activated service 'org.freedesktop.systemd1' Apr 12 18:21:16.233850 extend-filesystems[1672]: Found nvme0n1p6 Apr 12 18:21:16.238181 extend-filesystems[1672]: Found nvme0n1p7 Apr 12 18:21:16.238181 extend-filesystems[1672]: Found nvme0n1p9 Apr 12 18:21:16.238181 extend-filesystems[1672]: Checking size of /dev/nvme0n1p9 Apr 12 18:21:16.260379 systemd[1]: Starting systemd-hostnamed.service... Apr 12 18:21:16.330597 bash[1730]: Updated "/home/core/.ssh/authorized_keys" Apr 12 18:21:16.334785 systemd[1]: Finished update-ssh-keys-after-ignition.service. Apr 12 18:21:16.350119 extend-filesystems[1672]: Resized partition /dev/nvme0n1p9 Apr 12 18:21:16.360862 extend-filesystems[1741]: resize2fs 1.46.5 (30-Dec-2021) Apr 12 18:21:16.366136 tar[1686]: ./bandwidth Apr 12 18:21:16.382894 update_engine[1682]: I0412 18:21:16.381738 1682 main.cc:92] Flatcar Update Engine starting Apr 12 18:21:16.407280 amazon-ssm-agent[1666]: 2024/04/12 18:21:16 Failed to load instance info from vault. RegistrationKey does not exist. Apr 12 18:21:16.410722 systemd[1]: Started update-engine.service. Apr 12 18:21:16.414584 update_engine[1682]: I0412 18:21:16.410825 1682 update_check_scheduler.cc:74] Next update check in 6m54s Apr 12 18:21:16.417083 systemd[1]: Started locksmithd.service. Apr 12 18:21:16.431322 amazon-ssm-agent[1666]: Initializing new seelog logger Apr 12 18:21:16.435690 systemd-logind[1680]: Watching system buttons on /dev/input/event0 (Power Button) Apr 12 18:21:16.438950 amazon-ssm-agent[1666]: New Seelog Logger Creation Complete Apr 12 18:21:16.439751 amazon-ssm-agent[1666]: 2024/04/12 18:21:16 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Apr 12 18:21:16.439917 systemd-logind[1680]: New seat seat0. Apr 12 18:21:16.449909 systemd[1]: Started systemd-logind.service. Apr 12 18:21:16.456435 amazon-ssm-agent[1666]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Apr 12 18:21:16.458558 amazon-ssm-agent[1666]: 2024/04/12 18:21:16 processing appconfig overrides Apr 12 18:21:16.485973 env[1688]: time="2024-04-12T18:21:16.485900610Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Apr 12 18:21:16.486562 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Apr 12 18:21:16.598548 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Apr 12 18:21:16.599253 systemd[1]: nvidia.service: Deactivated successfully. Apr 12 18:21:16.690555 extend-filesystems[1741]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Apr 12 18:21:16.690555 extend-filesystems[1741]: old_desc_blocks = 1, new_desc_blocks = 1 Apr 12 18:21:16.690555 extend-filesystems[1741]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Apr 12 18:21:16.738093 extend-filesystems[1672]: Resized filesystem in /dev/nvme0n1p9 Apr 12 18:21:16.698549 systemd[1]: extend-filesystems.service: Deactivated successfully. Apr 12 18:21:16.698875 systemd[1]: Finished extend-filesystems.service. Apr 12 18:21:16.764035 tar[1686]: ./ptp Apr 12 18:21:16.770311 env[1688]: time="2024-04-12T18:21:16.770253879Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Apr 12 18:21:16.771773 env[1688]: time="2024-04-12T18:21:16.771729353Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Apr 12 18:21:16.787181 env[1688]: time="2024-04-12T18:21:16.787107917Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.154-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Apr 12 18:21:16.787732 env[1688]: time="2024-04-12T18:21:16.787700143Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Apr 12 18:21:16.788700 env[1688]: time="2024-04-12T18:21:16.788652567Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Apr 12 18:21:16.794243 env[1688]: time="2024-04-12T18:21:16.794188156Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Apr 12 18:21:16.794639 env[1688]: time="2024-04-12T18:21:16.794604972Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Apr 12 18:21:16.795331 env[1688]: time="2024-04-12T18:21:16.795297002Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Apr 12 18:21:16.796310 env[1688]: time="2024-04-12T18:21:16.796271915Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Apr 12 18:21:16.799428 env[1688]: time="2024-04-12T18:21:16.799374842Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Apr 12 18:21:16.803770 env[1688]: time="2024-04-12T18:21:16.803714465Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Apr 12 18:21:16.805739 env[1688]: time="2024-04-12T18:21:16.805688100Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Apr 12 18:21:16.806918 env[1688]: time="2024-04-12T18:21:16.806851073Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Apr 12 18:21:16.808226 env[1688]: time="2024-04-12T18:21:16.808174532Z" level=info msg="metadata content store policy set" policy=shared Apr 12 18:21:16.844377 dbus-daemon[1670]: [system] Successfully activated service 'org.freedesktop.hostname1' Apr 12 18:21:16.844653 systemd[1]: Started systemd-hostnamed.service. Apr 12 18:21:16.854689 dbus-daemon[1670]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1732 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Apr 12 18:21:16.861199 systemd[1]: Starting polkit.service... Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.879909529Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.879982770Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.880028092Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.880098083Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.880134382Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.880165722Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.880196062Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.880694235Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.880743276Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.880776166Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.880807494Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.880837582Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.881075694Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Apr 12 18:21:16.882528 env[1688]: time="2024-04-12T18:21:16.881250782Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.881691327Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.881737957Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.881767621Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.881885150Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.881918292Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.881947875Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.881974887Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.882004286Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.882032986Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.882060973Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.882087927Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.882118693Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.882372440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.882406638Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Apr 12 18:21:16.883377 env[1688]: time="2024-04-12T18:21:16.882435624Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Apr 12 18:21:16.884201 env[1688]: time="2024-04-12T18:21:16.882474919Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Apr 12 18:21:16.885736 env[1688]: time="2024-04-12T18:21:16.885128783Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Apr 12 18:21:16.885736 env[1688]: time="2024-04-12T18:21:16.885209773Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Apr 12 18:21:16.885736 env[1688]: time="2024-04-12T18:21:16.885279110Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Apr 12 18:21:16.885736 env[1688]: time="2024-04-12T18:21:16.885386962Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Apr 12 18:21:16.886674 env[1688]: time="2024-04-12T18:21:16.886566672Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Apr 12 18:21:16.888348 env[1688]: time="2024-04-12T18:21:16.887071584Z" level=info msg="Connect containerd service" Apr 12 18:21:16.888348 env[1688]: time="2024-04-12T18:21:16.887142264Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Apr 12 18:21:16.893632 env[1688]: time="2024-04-12T18:21:16.893562489Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Apr 12 18:21:16.893998 env[1688]: time="2024-04-12T18:21:16.893952133Z" level=info msg="Start subscribing containerd event" Apr 12 18:21:16.896185 env[1688]: time="2024-04-12T18:21:16.896123437Z" level=info msg="Start recovering state" Apr 12 18:21:16.896512 env[1688]: time="2024-04-12T18:21:16.896456417Z" level=info msg="Start event monitor" Apr 12 18:21:16.897798 env[1688]: time="2024-04-12T18:21:16.897757950Z" level=info msg="Start snapshots syncer" Apr 12 18:21:16.897969 env[1688]: time="2024-04-12T18:21:16.897940110Z" level=info msg="Start cni network conf syncer for default" Apr 12 18:21:16.898083 env[1688]: time="2024-04-12T18:21:16.898057157Z" level=info msg="Start streaming server" Apr 12 18:21:16.898957 env[1688]: time="2024-04-12T18:21:16.898914276Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Apr 12 18:21:16.901558 env[1688]: time="2024-04-12T18:21:16.901498068Z" level=info msg=serving... address=/run/containerd/containerd.sock Apr 12 18:21:16.901873 env[1688]: time="2024-04-12T18:21:16.901843470Z" level=info msg="containerd successfully booted in 0.418107s" Apr 12 18:21:16.901963 systemd[1]: Started containerd.service. Apr 12 18:21:16.955698 polkitd[1801]: Started polkitd version 121 Apr 12 18:21:16.981214 polkitd[1801]: Loading rules from directory /etc/polkit-1/rules.d Apr 12 18:21:16.981331 polkitd[1801]: Loading rules from directory /usr/share/polkit-1/rules.d Apr 12 18:21:16.990579 polkitd[1801]: Finished loading, compiling and executing 2 rules Apr 12 18:21:16.991492 dbus-daemon[1670]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Apr 12 18:21:16.991772 systemd[1]: Started polkit.service. Apr 12 18:21:16.992404 polkitd[1801]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Apr 12 18:21:17.043308 systemd-hostnamed[1732]: Hostname set to (transient) Apr 12 18:21:17.043454 systemd-resolved[1640]: System hostname changed to 'ip-172-31-30-133'. Apr 12 18:21:17.104619 tar[1686]: ./vlan Apr 12 18:21:17.292360 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Apr 12 18:21:17.294914 systemd[1]: Finished systemd-machine-id-commit.service. Apr 12 18:21:17.355846 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO Create new startup processor Apr 12 18:21:17.367688 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [LongRunningPluginsManager] registered plugins: {} Apr 12 18:21:17.367870 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO Initializing bookkeeping folders Apr 12 18:21:17.367870 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO removing the completed state files Apr 12 18:21:17.367870 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO Initializing bookkeeping folders for long running plugins Apr 12 18:21:17.367870 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Apr 12 18:21:17.367870 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO Initializing healthcheck folders for long running plugins Apr 12 18:21:17.367870 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO Initializing locations for inventory plugin Apr 12 18:21:17.367870 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO Initializing default location for custom inventory Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO Initializing default location for file inventory Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO Initializing default location for role inventory Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO Init the cloudwatchlogs publisher Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [instanceID=i-0a16b9dca48eecf6a] Successfully loaded platform independent plugin aws:refreshAssociation Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [instanceID=i-0a16b9dca48eecf6a] Successfully loaded platform independent plugin aws:softwareInventory Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [instanceID=i-0a16b9dca48eecf6a] Successfully loaded platform independent plugin aws:runDockerAction Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [instanceID=i-0a16b9dca48eecf6a] Successfully loaded platform independent plugin aws:configureDocker Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [instanceID=i-0a16b9dca48eecf6a] Successfully loaded platform independent plugin aws:configurePackage Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [instanceID=i-0a16b9dca48eecf6a] Successfully loaded platform independent plugin aws:downloadContent Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [instanceID=i-0a16b9dca48eecf6a] Successfully loaded platform independent plugin aws:runDocument Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [instanceID=i-0a16b9dca48eecf6a] Successfully loaded platform independent plugin aws:runPowerShellScript Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [instanceID=i-0a16b9dca48eecf6a] Successfully loaded platform independent plugin aws:updateSsmAgent Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [instanceID=i-0a16b9dca48eecf6a] Successfully loaded platform dependent plugin aws:runShellScript Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Apr 12 18:21:17.368229 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO OS: linux, Arch: arm64 Apr 12 18:21:17.373419 amazon-ssm-agent[1666]: datastore file /var/lib/amazon/ssm/i-0a16b9dca48eecf6a/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Apr 12 18:21:17.427674 coreos-metadata[1668]: Apr 12 18:21:17.427 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Apr 12 18:21:17.444125 coreos-metadata[1668]: Apr 12 18:21:17.443 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Apr 12 18:21:17.445911 coreos-metadata[1668]: Apr 12 18:21:17.445 INFO Fetch successful Apr 12 18:21:17.446233 coreos-metadata[1668]: Apr 12 18:21:17.446 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Apr 12 18:21:17.448700 tar[1686]: ./host-device Apr 12 18:21:17.450631 coreos-metadata[1668]: Apr 12 18:21:17.450 INFO Fetch successful Apr 12 18:21:17.456553 unknown[1668]: wrote ssh authorized keys file for user: core Apr 12 18:21:17.461068 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessageGatewayService] Starting session document processing engine... Apr 12 18:21:17.488078 update-ssh-keys[1864]: Updated "/home/core/.ssh/authorized_keys" Apr 12 18:21:17.490047 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Apr 12 18:21:17.556172 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessageGatewayService] [EngineProcessor] Starting Apr 12 18:21:17.648612 tar[1686]: ./tuning Apr 12 18:21:17.651008 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Apr 12 18:21:17.745605 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-0a16b9dca48eecf6a, requestId: 97250d12-d74e-4de8-b3b7-4911e3b4fe47 Apr 12 18:21:17.770679 tar[1686]: ./vrf Apr 12 18:21:17.841735 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessagingDeliveryService] Starting document processing engine... Apr 12 18:21:17.901895 tar[1686]: ./sbr Apr 12 18:21:17.936615 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessagingDeliveryService] [EngineProcessor] Starting Apr 12 18:21:18.031776 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Apr 12 18:21:18.034258 tar[1686]: ./tap Apr 12 18:21:18.122572 tar[1685]: linux-arm64/LICENSE Apr 12 18:21:18.122572 tar[1685]: linux-arm64/README.md Apr 12 18:21:18.127076 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessagingDeliveryService] Starting message polling Apr 12 18:21:18.138909 systemd[1]: Finished prepare-helm.service. Apr 12 18:21:18.180134 tar[1686]: ./dhcp Apr 12 18:21:18.222792 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessagingDeliveryService] Starting send replies to MDS Apr 12 18:21:18.236231 systemd[1]: Finished prepare-critools.service. Apr 12 18:21:18.318437 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [instanceID=i-0a16b9dca48eecf6a] Starting association polling Apr 12 18:21:18.335103 tar[1686]: ./static Apr 12 18:21:18.372128 tar[1686]: ./firewall Apr 12 18:21:18.414308 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Apr 12 18:21:18.427491 tar[1686]: ./macvlan Apr 12 18:21:18.478771 tar[1686]: ./dummy Apr 12 18:21:18.510348 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessagingDeliveryService] [Association] Launching response handler Apr 12 18:21:18.528304 tar[1686]: ./bridge Apr 12 18:21:18.582091 tar[1686]: ./ipvlan Apr 12 18:21:18.606644 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Apr 12 18:21:18.631141 tar[1686]: ./portmap Apr 12 18:21:18.677787 tar[1686]: ./host-local Apr 12 18:21:18.703126 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Apr 12 18:21:18.764076 systemd[1]: Finished prepare-cni-plugins.service. Apr 12 18:21:18.787625 locksmithd[1752]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Apr 12 18:21:18.799809 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Apr 12 18:21:18.896674 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessageGatewayService] listening reply. Apr 12 18:21:18.993779 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [HealthCheck] HealthCheck reporting agent health. Apr 12 18:21:19.091006 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [OfflineService] Starting document processing engine... Apr 12 18:21:19.188405 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [OfflineService] [EngineProcessor] Starting Apr 12 18:21:19.286109 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [OfflineService] [EngineProcessor] Initial processing Apr 12 18:21:19.383858 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [OfflineService] Starting message polling Apr 12 18:21:19.481855 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [OfflineService] Starting send replies to MDS Apr 12 18:21:19.580107 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [LongRunningPluginsManager] starting long running plugin manager Apr 12 18:21:19.678531 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Apr 12 18:21:19.777125 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Apr 12 18:21:19.876005 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [StartupProcessor] Executing startup processor tasks Apr 12 18:21:19.974967 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Apr 12 18:21:20.074141 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Apr 12 18:21:20.173544 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.3 Apr 12 18:21:20.273123 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0a16b9dca48eecf6a?role=subscribe&stream=input Apr 12 18:21:20.372885 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0a16b9dca48eecf6a?role=subscribe&stream=input Apr 12 18:21:20.472908 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessageGatewayService] Starting receiving message from control channel Apr 12 18:21:20.519990 sshd_keygen[1707]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Apr 12 18:21:20.554275 systemd[1]: Finished sshd-keygen.service. Apr 12 18:21:20.559323 systemd[1]: Starting issuegen.service... Apr 12 18:21:20.570199 systemd[1]: issuegen.service: Deactivated successfully. Apr 12 18:21:20.570598 systemd[1]: Finished issuegen.service. Apr 12 18:21:20.573133 amazon-ssm-agent[1666]: 2024-04-12 18:21:17 INFO [MessageGatewayService] [EngineProcessor] Initial processing Apr 12 18:21:20.575899 systemd[1]: Starting systemd-user-sessions.service... Apr 12 18:21:20.590263 systemd[1]: Finished systemd-user-sessions.service. Apr 12 18:21:20.595486 systemd[1]: Started getty@tty1.service. Apr 12 18:21:20.600089 systemd[1]: Started serial-getty@ttyS0.service. Apr 12 18:21:20.602693 systemd[1]: Reached target getty.target. Apr 12 18:21:20.605147 systemd[1]: Reached target multi-user.target. Apr 12 18:21:20.610227 systemd[1]: Starting systemd-update-utmp-runlevel.service... Apr 12 18:21:20.625730 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Apr 12 18:21:20.626101 systemd[1]: Finished systemd-update-utmp-runlevel.service. Apr 12 18:21:20.628675 systemd[1]: Startup finished in 1.111s (kernel) + 31.259s (initrd) + 12.777s (userspace) = 45.148s. Apr 12 18:21:21.827360 amazon-ssm-agent[1666]: 2024-04-12 18:21:21 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Apr 12 18:21:24.253661 systemd[1]: Created slice system-sshd.slice. Apr 12 18:21:24.256750 systemd[1]: Started sshd@0-172.31.30.133:22-139.178.89.65:46868.service. Apr 12 18:21:24.491353 sshd[1889]: Accepted publickey for core from 139.178.89.65 port 46868 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:21:24.495813 sshd[1889]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:21:24.513414 systemd[1]: Created slice user-500.slice. Apr 12 18:21:24.516002 systemd[1]: Starting user-runtime-dir@500.service... Apr 12 18:21:24.524711 systemd-logind[1680]: New session 1 of user core. Apr 12 18:21:24.534497 systemd[1]: Finished user-runtime-dir@500.service. Apr 12 18:21:24.537698 systemd[1]: Starting user@500.service... Apr 12 18:21:24.544098 (systemd)[1892]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:21:24.714460 systemd[1892]: Queued start job for default target default.target. Apr 12 18:21:24.715463 systemd[1892]: Reached target paths.target. Apr 12 18:21:24.715552 systemd[1892]: Reached target sockets.target. Apr 12 18:21:24.715587 systemd[1892]: Reached target timers.target. Apr 12 18:21:24.715616 systemd[1892]: Reached target basic.target. Apr 12 18:21:24.715709 systemd[1892]: Reached target default.target. Apr 12 18:21:24.715780 systemd[1892]: Startup finished in 160ms. Apr 12 18:21:24.716653 systemd[1]: Started user@500.service. Apr 12 18:21:24.718700 systemd[1]: Started session-1.scope. Apr 12 18:21:24.863676 systemd[1]: Started sshd@1-172.31.30.133:22-139.178.89.65:46884.service. Apr 12 18:21:25.042108 sshd[1901]: Accepted publickey for core from 139.178.89.65 port 46884 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:21:25.044485 sshd[1901]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:21:25.051410 systemd-logind[1680]: New session 2 of user core. Apr 12 18:21:25.053327 systemd[1]: Started session-2.scope. Apr 12 18:21:25.203808 sshd[1901]: pam_unix(sshd:session): session closed for user core Apr 12 18:21:25.209271 systemd-logind[1680]: Session 2 logged out. Waiting for processes to exit. Apr 12 18:21:25.209852 systemd[1]: sshd@1-172.31.30.133:22-139.178.89.65:46884.service: Deactivated successfully. Apr 12 18:21:25.211087 systemd[1]: session-2.scope: Deactivated successfully. Apr 12 18:21:25.212485 systemd-logind[1680]: Removed session 2. Apr 12 18:21:25.231456 systemd[1]: Started sshd@2-172.31.30.133:22-139.178.89.65:46886.service. Apr 12 18:21:25.405617 sshd[1907]: Accepted publickey for core from 139.178.89.65 port 46886 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:21:25.408448 sshd[1907]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:21:25.416554 systemd[1]: Started session-3.scope. Apr 12 18:21:25.418609 systemd-logind[1680]: New session 3 of user core. Apr 12 18:21:25.540110 sshd[1907]: pam_unix(sshd:session): session closed for user core Apr 12 18:21:25.544699 systemd[1]: sshd@2-172.31.30.133:22-139.178.89.65:46886.service: Deactivated successfully. Apr 12 18:21:25.545882 systemd[1]: session-3.scope: Deactivated successfully. Apr 12 18:21:25.547008 systemd-logind[1680]: Session 3 logged out. Waiting for processes to exit. Apr 12 18:21:25.548715 systemd-logind[1680]: Removed session 3. Apr 12 18:21:25.567106 systemd[1]: Started sshd@3-172.31.30.133:22-139.178.89.65:46898.service. Apr 12 18:21:25.740184 sshd[1913]: Accepted publickey for core from 139.178.89.65 port 46898 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:21:25.742994 sshd[1913]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:21:25.751100 systemd[1]: Started session-4.scope. Apr 12 18:21:25.752087 systemd-logind[1680]: New session 4 of user core. Apr 12 18:21:25.879388 sshd[1913]: pam_unix(sshd:session): session closed for user core Apr 12 18:21:25.884811 systemd-logind[1680]: Session 4 logged out. Waiting for processes to exit. Apr 12 18:21:25.884969 systemd[1]: session-4.scope: Deactivated successfully. Apr 12 18:21:25.886277 systemd[1]: sshd@3-172.31.30.133:22-139.178.89.65:46898.service: Deactivated successfully. Apr 12 18:21:25.888195 systemd-logind[1680]: Removed session 4. Apr 12 18:21:25.906199 systemd[1]: Started sshd@4-172.31.30.133:22-139.178.89.65:46908.service. Apr 12 18:21:26.077589 sshd[1920]: Accepted publickey for core from 139.178.89.65 port 46908 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:21:26.080355 sshd[1920]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:21:26.088317 systemd[1]: Started session-5.scope. Apr 12 18:21:26.090422 systemd-logind[1680]: New session 5 of user core. Apr 12 18:21:26.235488 sudo[1923]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Apr 12 18:21:26.236022 sudo[1923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Apr 12 18:21:26.257728 dbus-daemon[1670]: avc: received setenforce notice (enforcing=1) Apr 12 18:21:26.259565 sudo[1923]: pam_unix(sudo:session): session closed for user root Apr 12 18:21:26.283291 sshd[1920]: pam_unix(sshd:session): session closed for user core Apr 12 18:21:26.288482 systemd[1]: sshd@4-172.31.30.133:22-139.178.89.65:46908.service: Deactivated successfully. Apr 12 18:21:26.289953 systemd[1]: session-5.scope: Deactivated successfully. Apr 12 18:21:26.291158 systemd-logind[1680]: Session 5 logged out. Waiting for processes to exit. Apr 12 18:21:26.293380 systemd-logind[1680]: Removed session 5. Apr 12 18:21:26.311409 systemd[1]: Started sshd@5-172.31.30.133:22-139.178.89.65:46910.service. Apr 12 18:21:26.487840 sshd[1927]: Accepted publickey for core from 139.178.89.65 port 46910 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:21:26.490819 sshd[1927]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:21:26.498589 systemd-logind[1680]: New session 6 of user core. Apr 12 18:21:26.499372 systemd[1]: Started session-6.scope. Apr 12 18:21:26.605620 sudo[1931]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Apr 12 18:21:26.606122 sudo[1931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Apr 12 18:21:26.611326 sudo[1931]: pam_unix(sudo:session): session closed for user root Apr 12 18:21:26.620276 sudo[1930]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Apr 12 18:21:26.621242 sudo[1930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Apr 12 18:21:26.638518 systemd[1]: Stopping audit-rules.service... Apr 12 18:21:26.638000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Apr 12 18:21:26.642443 kernel: kauditd_printk_skb: 71 callbacks suppressed Apr 12 18:21:26.642553 kernel: audit: type=1305 audit(1712946086.638:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Apr 12 18:21:26.642913 auditctl[1934]: No rules Apr 12 18:21:26.643842 systemd[1]: audit-rules.service: Deactivated successfully. Apr 12 18:21:26.644175 systemd[1]: Stopped audit-rules.service. Apr 12 18:21:26.648948 systemd[1]: Starting audit-rules.service... Apr 12 18:21:26.638000 audit[1934]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe972d1b0 a2=420 a3=0 items=0 ppid=1 pid=1934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:26.638000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Apr 12 18:21:26.665246 kernel: audit: type=1300 audit(1712946086.638:163): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe972d1b0 a2=420 a3=0 items=0 ppid=1 pid=1934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:26.665380 kernel: audit: type=1327 audit(1712946086.638:163): proctitle=2F7362696E2F617564697463746C002D44 Apr 12 18:21:26.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:26.673549 kernel: audit: type=1131 audit(1712946086.641:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:26.689463 augenrules[1951]: No rules Apr 12 18:21:26.690971 systemd[1]: Finished audit-rules.service. Apr 12 18:21:26.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:26.693461 sudo[1930]: pam_unix(sudo:session): session closed for user root Apr 12 18:21:26.692000 audit[1930]: USER_END pid=1930 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:21:26.709256 kernel: audit: type=1130 audit(1712946086.690:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:26.709321 kernel: audit: type=1106 audit(1712946086.692:166): pid=1930 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:21:26.709363 kernel: audit: type=1104 audit(1712946086.692:167): pid=1930 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:21:26.692000 audit[1930]: CRED_DISP pid=1930 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:21:26.717336 sshd[1927]: pam_unix(sshd:session): session closed for user core Apr 12 18:21:26.719000 audit[1927]: USER_END pid=1927 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:21:26.719000 audit[1927]: CRED_DISP pid=1927 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:21:26.731402 systemd[1]: sshd@5-172.31.30.133:22-139.178.89.65:46910.service: Deactivated successfully. Apr 12 18:21:26.732632 systemd[1]: session-6.scope: Deactivated successfully. Apr 12 18:21:26.740485 kernel: audit: type=1106 audit(1712946086.719:168): pid=1927 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:21:26.740610 kernel: audit: type=1104 audit(1712946086.719:169): pid=1927 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:21:26.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.30.133:22-139.178.89.65:46910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:26.751717 kernel: audit: type=1131 audit(1712946086.730:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.30.133:22-139.178.89.65:46910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:26.749174 systemd[1]: Started sshd@6-172.31.30.133:22-139.178.89.65:46912.service. Apr 12 18:21:26.751170 systemd-logind[1680]: Session 6 logged out. Waiting for processes to exit. Apr 12 18:21:26.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.30.133:22-139.178.89.65:46912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:26.756196 systemd-logind[1680]: Removed session 6. Apr 12 18:21:26.919000 audit[1957]: USER_ACCT pid=1957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:21:26.921152 sshd[1957]: Accepted publickey for core from 139.178.89.65 port 46912 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:21:26.921000 audit[1957]: CRED_ACQ pid=1957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:21:26.921000 audit[1957]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2e85a40 a2=3 a3=1 items=0 ppid=1 pid=1957 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:26.921000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:21:26.924022 sshd[1957]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:21:26.932363 systemd[1]: Started session-7.scope. Apr 12 18:21:26.933128 systemd-logind[1680]: New session 7 of user core. Apr 12 18:21:26.942000 audit[1957]: USER_START pid=1957 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:21:26.944000 audit[1959]: CRED_ACQ pid=1959 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:21:27.035000 audit[1960]: USER_ACCT pid=1960 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:21:27.036641 sudo[1960]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Apr 12 18:21:27.036000 audit[1960]: CRED_REFR pid=1960 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:21:27.037131 sudo[1960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Apr 12 18:21:27.040000 audit[1960]: USER_START pid=1960 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:21:27.719279 systemd[1]: Starting docker.service... Apr 12 18:21:27.795741 env[1975]: time="2024-04-12T18:21:27.795652227Z" level=info msg="Starting up" Apr 12 18:21:27.807727 env[1975]: time="2024-04-12T18:21:27.807677467Z" level=info msg="parsed scheme: \"unix\"" module=grpc Apr 12 18:21:27.808255 env[1975]: time="2024-04-12T18:21:27.808220869Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Apr 12 18:21:27.808426 env[1975]: time="2024-04-12T18:21:27.808391647Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Apr 12 18:21:27.808560 env[1975]: time="2024-04-12T18:21:27.808531573Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Apr 12 18:21:27.811293 env[1975]: time="2024-04-12T18:21:27.811252193Z" level=info msg="parsed scheme: \"unix\"" module=grpc Apr 12 18:21:27.811463 env[1975]: time="2024-04-12T18:21:27.811435267Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Apr 12 18:21:27.811669 env[1975]: time="2024-04-12T18:21:27.811637564Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Apr 12 18:21:27.811781 env[1975]: time="2024-04-12T18:21:27.811754121Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Apr 12 18:21:28.149036 env[1975]: time="2024-04-12T18:21:28.148979238Z" level=info msg="Loading containers: start." Apr 12 18:21:28.250000 audit[2006]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2006 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.250000 audit[2006]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe8afe650 a2=0 a3=1 items=0 ppid=1975 pid=2006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.250000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Apr 12 18:21:28.254000 audit[2008]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2008 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.254000 audit[2008]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff5887af0 a2=0 a3=1 items=0 ppid=1975 pid=2008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.254000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Apr 12 18:21:28.258000 audit[2010]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2010 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.258000 audit[2010]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff9416040 a2=0 a3=1 items=0 ppid=1975 pid=2010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.258000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Apr 12 18:21:28.262000 audit[2012]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2012 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.262000 audit[2012]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffea73760 a2=0 a3=1 items=0 ppid=1975 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.262000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Apr 12 18:21:28.267000 audit[2014]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2014 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.267000 audit[2014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff7ec2870 a2=0 a3=1 items=0 ppid=1975 pid=2014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.267000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Apr 12 18:21:28.296000 audit[2019]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2019 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.296000 audit[2019]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffda5ba1a0 a2=0 a3=1 items=0 ppid=1975 pid=2019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.296000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Apr 12 18:21:28.308000 audit[2021]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2021 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.308000 audit[2021]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffee472c70 a2=0 a3=1 items=0 ppid=1975 pid=2021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.308000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Apr 12 18:21:28.311000 audit[2023]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2023 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.311000 audit[2023]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc955e720 a2=0 a3=1 items=0 ppid=1975 pid=2023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.311000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Apr 12 18:21:28.314000 audit[2025]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2025 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.314000 audit[2025]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffedb09b00 a2=0 a3=1 items=0 ppid=1975 pid=2025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.314000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:21:28.328000 audit[2029]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2029 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.328000 audit[2029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffffd5aeba0 a2=0 a3=1 items=0 ppid=1975 pid=2029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.328000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:21:28.330000 audit[2030]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2030 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.330000 audit[2030]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff4c11820 a2=0 a3=1 items=0 ppid=1975 pid=2030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.330000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:21:28.356554 kernel: Initializing XFRM netlink socket Apr 12 18:21:28.396984 env[1975]: time="2024-04-12T18:21:28.396911728Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Apr 12 18:21:28.400462 (udev-worker)[1986]: Network interface NamePolicy= disabled on kernel command line. Apr 12 18:21:28.432000 audit[2038]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2038 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.432000 audit[2038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffccad4e30 a2=0 a3=1 items=0 ppid=1975 pid=2038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.432000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Apr 12 18:21:28.449000 audit[2041]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2041 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.449000 audit[2041]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffce543340 a2=0 a3=1 items=0 ppid=1975 pid=2041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.449000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Apr 12 18:21:28.455000 audit[2044]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2044 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.455000 audit[2044]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffffbd40c80 a2=0 a3=1 items=0 ppid=1975 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.455000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Apr 12 18:21:28.458000 audit[2046]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2046 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.458000 audit[2046]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe6b8aa70 a2=0 a3=1 items=0 ppid=1975 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.458000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Apr 12 18:21:28.462000 audit[2048]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.462000 audit[2048]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffc0a80df0 a2=0 a3=1 items=0 ppid=1975 pid=2048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.462000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Apr 12 18:21:28.466000 audit[2050]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2050 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.466000 audit[2050]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffffa4c3840 a2=0 a3=1 items=0 ppid=1975 pid=2050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.466000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Apr 12 18:21:28.470000 audit[2052]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2052 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.470000 audit[2052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffc96be1a0 a2=0 a3=1 items=0 ppid=1975 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.470000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Apr 12 18:21:28.493000 audit[2055]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2055 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.493000 audit[2055]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc9441e70 a2=0 a3=1 items=0 ppid=1975 pid=2055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.493000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Apr 12 18:21:28.497000 audit[2057]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.497000 audit[2057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffe883cca0 a2=0 a3=1 items=0 ppid=1975 pid=2057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.497000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Apr 12 18:21:28.500000 audit[2059]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2059 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.500000 audit[2059]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffc1bef910 a2=0 a3=1 items=0 ppid=1975 pid=2059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.500000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Apr 12 18:21:28.504000 audit[2061]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.504000 audit[2061]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffeb4dd4e0 a2=0 a3=1 items=0 ppid=1975 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.504000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Apr 12 18:21:28.505880 systemd-networkd[1498]: docker0: Link UP Apr 12 18:21:28.521000 audit[2065]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.521000 audit[2065]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffecbcfa00 a2=0 a3=1 items=0 ppid=1975 pid=2065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.521000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:21:28.524000 audit[2066]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2066 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:28.524000 audit[2066]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffead41ba0 a2=0 a3=1 items=0 ppid=1975 pid=2066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:28.524000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:21:28.525420 env[1975]: time="2024-04-12T18:21:28.525380117Z" level=info msg="Loading containers: done." Apr 12 18:21:28.547674 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2539596331-merged.mount: Deactivated successfully. Apr 12 18:21:28.563109 env[1975]: time="2024-04-12T18:21:28.563055110Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Apr 12 18:21:28.563654 env[1975]: time="2024-04-12T18:21:28.563623867Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Apr 12 18:21:28.563941 env[1975]: time="2024-04-12T18:21:28.563914931Z" level=info msg="Daemon has completed initialization" Apr 12 18:21:28.599153 systemd[1]: Started docker.service. Apr 12 18:21:28.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:28.611101 env[1975]: time="2024-04-12T18:21:28.610974548Z" level=info msg="API listen on /run/docker.sock" Apr 12 18:21:28.647419 systemd[1]: Reloading. Apr 12 18:21:28.765667 /usr/lib/systemd/system-generators/torcx-generator[2113]: time="2024-04-12T18:21:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.3 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.3 /var/lib/torcx/store]" Apr 12 18:21:28.765730 /usr/lib/systemd/system-generators/torcx-generator[2113]: time="2024-04-12T18:21:28Z" level=info msg="torcx already run" Apr 12 18:21:28.928691 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Apr 12 18:21:28.928730 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Apr 12 18:21:28.970974 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Apr 12 18:21:29.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit: BPF prog-id=37 op=LOAD Apr 12 18:21:29.117000 audit: BPF prog-id=24 op=UNLOAD Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit: BPF prog-id=38 op=LOAD Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.117000 audit: BPF prog-id=39 op=LOAD Apr 12 18:21:29.117000 audit: BPF prog-id=25 op=UNLOAD Apr 12 18:21:29.117000 audit: BPF prog-id=26 op=UNLOAD Apr 12 18:21:29.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.121000 audit: BPF prog-id=40 op=LOAD Apr 12 18:21:29.122000 audit: BPF prog-id=32 op=UNLOAD Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit: BPF prog-id=41 op=LOAD Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.122000 audit: BPF prog-id=42 op=LOAD Apr 12 18:21:29.122000 audit: BPF prog-id=33 op=UNLOAD Apr 12 18:21:29.122000 audit: BPF prog-id=34 op=UNLOAD Apr 12 18:21:29.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.123000 audit: BPF prog-id=43 op=LOAD Apr 12 18:21:29.123000 audit: BPF prog-id=23 op=UNLOAD Apr 12 18:21:29.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.125000 audit: BPF prog-id=44 op=LOAD Apr 12 18:21:29.125000 audit: BPF prog-id=35 op=UNLOAD Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit: BPF prog-id=45 op=LOAD Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.126000 audit: BPF prog-id=46 op=LOAD Apr 12 18:21:29.126000 audit: BPF prog-id=21 op=UNLOAD Apr 12 18:21:29.126000 audit: BPF prog-id=22 op=UNLOAD Apr 12 18:21:29.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.129000 audit: BPF prog-id=47 op=LOAD Apr 12 18:21:29.129000 audit: BPF prog-id=27 op=UNLOAD Apr 12 18:21:29.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.132000 audit: BPF prog-id=48 op=LOAD Apr 12 18:21:29.132000 audit: BPF prog-id=28 op=UNLOAD Apr 12 18:21:29.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit: BPF prog-id=49 op=LOAD Apr 12 18:21:29.134000 audit: BPF prog-id=29 op=UNLOAD Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit: BPF prog-id=50 op=LOAD Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.134000 audit: BPF prog-id=51 op=LOAD Apr 12 18:21:29.134000 audit: BPF prog-id=30 op=UNLOAD Apr 12 18:21:29.135000 audit: BPF prog-id=31 op=UNLOAD Apr 12 18:21:29.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit: BPF prog-id=52 op=LOAD Apr 12 18:21:29.138000 audit: BPF prog-id=18 op=UNLOAD Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit: BPF prog-id=53 op=LOAD Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:29.138000 audit: BPF prog-id=54 op=LOAD Apr 12 18:21:29.138000 audit: BPF prog-id=19 op=UNLOAD Apr 12 18:21:29.138000 audit: BPF prog-id=20 op=UNLOAD Apr 12 18:21:29.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:29.159754 systemd[1]: Started kubelet.service. Apr 12 18:21:29.299391 kubelet[2167]: E0412 18:21:29.299278 2167 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Apr 12 18:21:29.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:21:29.303900 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Apr 12 18:21:29.304202 systemd[1]: kubelet.service: Failed with result 'exit-code'. Apr 12 18:21:30.322732 env[1688]: time="2024-04-12T18:21:30.322654978Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.12\"" Apr 12 18:21:30.978620 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1884615168.mount: Deactivated successfully. Apr 12 18:21:33.213591 env[1688]: time="2024-04-12T18:21:33.213532095Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:33.216979 env[1688]: time="2024-04-12T18:21:33.216930169Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d4d4d261fc80c6c87ea30cb7d2b1a53b684be80fb7af5e16a2c97371e669f19f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:33.220402 env[1688]: time="2024-04-12T18:21:33.220338445Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:33.223868 env[1688]: time="2024-04-12T18:21:33.223817790Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:cf0c29f585316888225cf254949988bdbedc7ba6238bc9a24bf6f0c508c42b6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:33.225262 env[1688]: time="2024-04-12T18:21:33.225218762Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.12\" returns image reference \"sha256:d4d4d261fc80c6c87ea30cb7d2b1a53b684be80fb7af5e16a2c97371e669f19f\"" Apr 12 18:21:33.242708 env[1688]: time="2024-04-12T18:21:33.242636631Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.12\"" Apr 12 18:21:35.582813 env[1688]: time="2024-04-12T18:21:35.582732311Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:35.586314 env[1688]: time="2024-04-12T18:21:35.586252098Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a4a7509f59f7f027d7c434948b3b8e5463b835d28675c76c6d1ff21d2c4e8f18,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:35.590279 env[1688]: time="2024-04-12T18:21:35.590214997Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:35.594750 env[1688]: time="2024-04-12T18:21:35.594688382Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6caa3a4278e87169371d031861e49db21742bcbd8df650d7fe519a1a7f6764af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:35.595756 env[1688]: time="2024-04-12T18:21:35.595712167Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.12\" returns image reference \"sha256:a4a7509f59f7f027d7c434948b3b8e5463b835d28675c76c6d1ff21d2c4e8f18\"" Apr 12 18:21:35.613933 env[1688]: time="2024-04-12T18:21:35.613882534Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.12\"" Apr 12 18:21:37.046873 env[1688]: time="2024-04-12T18:21:37.046798511Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:37.050392 env[1688]: time="2024-04-12T18:21:37.050330795Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5de6108d9220f19bcc35bf81a2879e5ff2f6506c08af260c116b803579db675b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:37.055686 env[1688]: time="2024-04-12T18:21:37.055617685Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:37.063384 env[1688]: time="2024-04-12T18:21:37.063324951Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:b8bb7b17a4f915419575ceb885e128d0bb5ea8e67cb88dbde257988b770a4dce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:37.064879 env[1688]: time="2024-04-12T18:21:37.064827583Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.12\" returns image reference \"sha256:5de6108d9220f19bcc35bf81a2879e5ff2f6506c08af260c116b803579db675b\"" Apr 12 18:21:37.082920 env[1688]: time="2024-04-12T18:21:37.082857206Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.12\"" Apr 12 18:21:38.545809 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3121129778.mount: Deactivated successfully. Apr 12 18:21:39.382263 env[1688]: time="2024-04-12T18:21:39.382201910Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:39.385649 env[1688]: time="2024-04-12T18:21:39.385599454Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7daec180765068529c26cc4c7c989513bebbe614cbbc58beebe1db17ae177e06,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:39.388276 env[1688]: time="2024-04-12T18:21:39.388211453Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:39.390939 env[1688]: time="2024-04-12T18:21:39.390892912Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:b0539f35b586abc54ca7660f9bb8a539d010b9e07d20e9e3d529cf0ca35d4ddf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:39.391802 env[1688]: time="2024-04-12T18:21:39.391761055Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.12\" returns image reference \"sha256:7daec180765068529c26cc4c7c989513bebbe614cbbc58beebe1db17ae177e06\"" Apr 12 18:21:39.410928 env[1688]: time="2024-04-12T18:21:39.410878865Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Apr 12 18:21:39.519237 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Apr 12 18:21:39.519605 systemd[1]: Stopped kubelet.service. Apr 12 18:21:39.528454 kernel: kauditd_printk_skb: 292 callbacks suppressed Apr 12 18:21:39.528641 kernel: audit: type=1130 audit(1712946099.518:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:39.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:39.522254 systemd[1]: Started kubelet.service. Apr 12 18:21:39.518000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:39.539516 kernel: audit: type=1131 audit(1712946099.518:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:39.540562 kernel: audit: type=1130 audit(1712946099.521:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:39.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:39.629321 kubelet[2205]: E0412 18:21:39.629228 2205 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Apr 12 18:21:39.638055 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Apr 12 18:21:39.638357 systemd[1]: kubelet.service: Failed with result 'exit-code'. Apr 12 18:21:39.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:21:39.647588 kernel: audit: type=1131 audit(1712946099.638:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:21:39.928248 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3174926760.mount: Deactivated successfully. Apr 12 18:21:39.936344 env[1688]: time="2024-04-12T18:21:39.936268846Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:39.940086 env[1688]: time="2024-04-12T18:21:39.940025188Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:39.942808 env[1688]: time="2024-04-12T18:21:39.942749220Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:39.945695 env[1688]: time="2024-04-12T18:21:39.945649371Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:39.946773 env[1688]: time="2024-04-12T18:21:39.946730409Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Apr 12 18:21:39.971816 env[1688]: time="2024-04-12T18:21:39.971742829Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Apr 12 18:21:41.283663 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3763055684.mount: Deactivated successfully. Apr 12 18:21:44.555536 env[1688]: time="2024-04-12T18:21:44.555454568Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:44.564803 env[1688]: time="2024-04-12T18:21:44.564725607Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:44.570282 env[1688]: time="2024-04-12T18:21:44.570224691Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:44.574140 env[1688]: time="2024-04-12T18:21:44.574081614Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Apr 12 18:21:44.579137 env[1688]: time="2024-04-12T18:21:44.572690042Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:44.590693 env[1688]: time="2024-04-12T18:21:44.590612263Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Apr 12 18:21:45.128581 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2453267352.mount: Deactivated successfully. Apr 12 18:21:46.030033 env[1688]: time="2024-04-12T18:21:46.029974783Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:46.033229 env[1688]: time="2024-04-12T18:21:46.033179395Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:46.036042 env[1688]: time="2024-04-12T18:21:46.035996137Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:46.038466 env[1688]: time="2024-04-12T18:21:46.038420862Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:46.039696 env[1688]: time="2024-04-12T18:21:46.039645994Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Apr 12 18:21:47.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:47.075908 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Apr 12 18:21:47.087541 kernel: audit: type=1131 audit(1712946107.074:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:47.106000 audit: BPF prog-id=42 op=UNLOAD Apr 12 18:21:47.106000 audit: BPF prog-id=41 op=UNLOAD Apr 12 18:21:47.113325 kernel: audit: type=1334 audit(1712946107.106:418): prog-id=42 op=UNLOAD Apr 12 18:21:47.113409 kernel: audit: type=1334 audit(1712946107.106:419): prog-id=41 op=UNLOAD Apr 12 18:21:47.106000 audit: BPF prog-id=40 op=UNLOAD Apr 12 18:21:47.116542 kernel: audit: type=1334 audit(1712946107.106:420): prog-id=40 op=UNLOAD Apr 12 18:21:49.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:49.769277 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Apr 12 18:21:49.769629 systemd[1]: Stopped kubelet.service. Apr 12 18:21:49.793778 kernel: audit: type=1130 audit(1712946109.768:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:49.793911 kernel: audit: type=1131 audit(1712946109.768:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:49.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:49.785650 systemd[1]: Started kubelet.service. Apr 12 18:21:49.810257 kernel: audit: type=1130 audit(1712946109.784:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:49.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:49.890025 kubelet[2287]: E0412 18:21:49.889962 2287 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Apr 12 18:21:49.894189 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Apr 12 18:21:49.894538 systemd[1]: kubelet.service: Failed with result 'exit-code'. Apr 12 18:21:49.893000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:21:49.903547 kernel: audit: type=1131 audit(1712946109.893:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:21:51.856764 amazon-ssm-agent[1666]: 2024-04-12 18:21:51 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Apr 12 18:21:53.180156 systemd[1]: Stopped kubelet.service. Apr 12 18:21:53.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:53.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:53.197984 kernel: audit: type=1130 audit(1712946113.179:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:53.198111 kernel: audit: type=1131 audit(1712946113.179:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:53.218792 systemd[1]: Reloading. Apr 12 18:21:53.345384 /usr/lib/systemd/system-generators/torcx-generator[2317]: time="2024-04-12T18:21:53Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.3 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.3 /var/lib/torcx/store]" Apr 12 18:21:53.345448 /usr/lib/systemd/system-generators/torcx-generator[2317]: time="2024-04-12T18:21:53Z" level=info msg="torcx already run" Apr 12 18:21:53.491612 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Apr 12 18:21:53.491650 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Apr 12 18:21:53.534222 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Apr 12 18:21:53.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.693726 kernel: audit: type=1400 audit(1712946113.677:427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.693825 kernel: audit: type=1400 audit(1712946113.685:428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.701278 kernel: audit: type=1400 audit(1712946113.685:429): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.708798 kernel: audit: type=1400 audit(1712946113.685:430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.708878 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.718133 kernel: audit: type=1400 audit(1712946113.685:431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.718196 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.727797 kernel: audit: type=1400 audit(1712946113.685:432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit: BPF prog-id=55 op=LOAD Apr 12 18:21:53.685000 audit: BPF prog-id=37 op=UNLOAD Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit: BPF prog-id=56 op=LOAD Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.685000 audit: BPF prog-id=57 op=LOAD Apr 12 18:21:53.685000 audit: BPF prog-id=38 op=UNLOAD Apr 12 18:21:53.685000 audit: BPF prog-id=39 op=UNLOAD Apr 12 18:21:53.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.693000 audit: BPF prog-id=58 op=LOAD Apr 12 18:21:53.693000 audit: BPF prog-id=43 op=UNLOAD Apr 12 18:21:53.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.700000 audit: BPF prog-id=59 op=LOAD Apr 12 18:21:53.700000 audit: BPF prog-id=44 op=UNLOAD Apr 12 18:21:53.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.708000 audit: BPF prog-id=60 op=LOAD Apr 12 18:21:53.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.730000 audit: BPF prog-id=62 op=LOAD Apr 12 18:21:53.730000 audit: BPF prog-id=47 op=UNLOAD Apr 12 18:21:53.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.732000 audit: BPF prog-id=63 op=LOAD Apr 12 18:21:53.732000 audit: BPF prog-id=48 op=UNLOAD Apr 12 18:21:53.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit: BPF prog-id=64 op=LOAD Apr 12 18:21:53.735000 audit: BPF prog-id=49 op=UNLOAD Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit: BPF prog-id=65 op=LOAD Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.735000 audit: BPF prog-id=66 op=LOAD Apr 12 18:21:53.735000 audit: BPF prog-id=50 op=UNLOAD Apr 12 18:21:53.735000 audit: BPF prog-id=51 op=UNLOAD Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit: BPF prog-id=67 op=LOAD Apr 12 18:21:53.738000 audit: BPF prog-id=52 op=UNLOAD Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit: BPF prog-id=68 op=LOAD Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:53.739000 audit: BPF prog-id=69 op=LOAD Apr 12 18:21:53.739000 audit: BPF prog-id=53 op=UNLOAD Apr 12 18:21:53.739000 audit: BPF prog-id=54 op=UNLOAD Apr 12 18:21:53.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:21:53.770239 systemd[1]: Started kubelet.service. Apr 12 18:21:53.873774 kubelet[2372]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Apr 12 18:21:53.873774 kubelet[2372]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Apr 12 18:21:53.873774 kubelet[2372]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Apr 12 18:21:53.874382 kubelet[2372]: I0412 18:21:53.873859 2372 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Apr 12 18:21:55.758020 kubelet[2372]: I0412 18:21:55.757971 2372 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Apr 12 18:21:55.758724 kubelet[2372]: I0412 18:21:55.758571 2372 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Apr 12 18:21:55.758962 kubelet[2372]: I0412 18:21:55.758931 2372 server.go:837] "Client rotation is on, will bootstrap in background" Apr 12 18:21:55.766666 kubelet[2372]: E0412 18:21:55.766628 2372 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.30.133:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:55.766949 kubelet[2372]: I0412 18:21:55.766921 2372 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Apr 12 18:21:55.769193 kubelet[2372]: W0412 18:21:55.769162 2372 machine.go:65] Cannot read vendor id correctly, set empty. Apr 12 18:21:55.770401 kubelet[2372]: I0412 18:21:55.770355 2372 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Apr 12 18:21:55.770931 kubelet[2372]: I0412 18:21:55.770903 2372 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Apr 12 18:21:55.771053 kubelet[2372]: I0412 18:21:55.771022 2372 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Apr 12 18:21:55.771223 kubelet[2372]: I0412 18:21:55.771077 2372 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Apr 12 18:21:55.771223 kubelet[2372]: I0412 18:21:55.771102 2372 container_manager_linux.go:302] "Creating device plugin manager" Apr 12 18:21:55.771349 kubelet[2372]: I0412 18:21:55.771271 2372 state_mem.go:36] "Initialized new in-memory state store" Apr 12 18:21:55.776768 kubelet[2372]: I0412 18:21:55.776734 2372 kubelet.go:405] "Attempting to sync node with API server" Apr 12 18:21:55.777008 kubelet[2372]: I0412 18:21:55.776985 2372 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Apr 12 18:21:55.777161 kubelet[2372]: I0412 18:21:55.777139 2372 kubelet.go:309] "Adding apiserver pod source" Apr 12 18:21:55.777292 kubelet[2372]: I0412 18:21:55.777272 2372 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Apr 12 18:21:55.778806 kubelet[2372]: I0412 18:21:55.778773 2372 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Apr 12 18:21:55.779466 kubelet[2372]: W0412 18:21:55.779441 2372 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Apr 12 18:21:55.780467 kubelet[2372]: I0412 18:21:55.780434 2372 server.go:1168] "Started kubelet" Apr 12 18:21:55.780846 kubelet[2372]: W0412 18:21:55.780792 2372 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.30.133:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:55.781002 kubelet[2372]: E0412 18:21:55.780980 2372 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.30.133:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:55.781246 kubelet[2372]: W0412 18:21:55.781201 2372 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.30.133:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-133&limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:55.781389 kubelet[2372]: E0412 18:21:55.781368 2372 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.30.133:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-133&limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:55.782000 audit[2372]: AVC avc: denied { mac_admin } for pid=2372 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:55.782000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:21:55.782000 audit[2372]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e75500 a1=4000a5aa08 a2=4000e754d0 a3=25 items=0 ppid=1 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.782000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:21:55.785006 kubelet[2372]: I0412 18:21:55.784972 2372 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Apr 12 18:21:55.783000 audit[2372]: AVC avc: denied { mac_admin } for pid=2372 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:55.783000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:21:55.783000 audit[2372]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e76ea0 a1=4000a5aa20 a2=4000e75590 a3=25 items=0 ppid=1 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.783000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:21:55.786699 kubelet[2372]: E0412 18:21:55.786377 2372 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Apr 12 18:21:55.786699 kubelet[2372]: E0412 18:21:55.786528 2372 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Apr 12 18:21:55.786926 kubelet[2372]: I0412 18:21:55.786727 2372 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Apr 12 18:21:55.787133 kubelet[2372]: I0412 18:21:55.787107 2372 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Apr 12 18:21:55.787265 kubelet[2372]: I0412 18:21:55.787222 2372 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Apr 12 18:21:55.787483 kubelet[2372]: I0412 18:21:55.787461 2372 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Apr 12 18:21:55.788345 kubelet[2372]: I0412 18:21:55.788294 2372 server.go:461] "Adding debug handlers to kubelet server" Apr 12 18:21:55.791000 audit[2383]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:55.791000 audit[2383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd92d47b0 a2=0 a3=1 items=0 ppid=2372 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.791000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Apr 12 18:21:55.794552 kubelet[2372]: E0412 18:21:55.794332 2372 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-133.17c59b6aae79d723", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-133", UID:"ip-172-31-30-133", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-133"}, FirstTimestamp:time.Date(2024, time.April, 12, 18, 21, 55, 780400931, time.Local), LastTimestamp:time.Date(2024, time.April, 12, 18, 21, 55, 780400931, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.30.133:6443/api/v1/namespaces/default/events": dial tcp 172.31.30.133:6443: connect: connection refused'(may retry after sleeping) Apr 12 18:21:55.795969 kubelet[2372]: I0412 18:21:55.794931 2372 volume_manager.go:284] "Starting Kubelet Volume Manager" Apr 12 18:21:55.795969 kubelet[2372]: I0412 18:21:55.795550 2372 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Apr 12 18:21:55.799555 kubelet[2372]: E0412 18:21:55.799220 2372 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.30.133:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-133?timeout=10s\": dial tcp 172.31.30.133:6443: connect: connection refused" interval="200ms" Apr 12 18:21:55.799555 kubelet[2372]: W0412 18:21:55.799428 2372 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.30.133:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:55.799803 kubelet[2372]: E0412 18:21:55.799579 2372 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.30.133:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:55.803000 audit[2384]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2384 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:55.803000 audit[2384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcc160130 a2=0 a3=1 items=0 ppid=2372 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.803000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Apr 12 18:21:55.810000 audit[2386]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2386 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:55.810000 audit[2386]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff9d66e60 a2=0 a3=1 items=0 ppid=2372 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.810000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Apr 12 18:21:55.816000 audit[2388]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:55.816000 audit[2388]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff39d14e0 a2=0 a3=1 items=0 ppid=2372 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.816000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Apr 12 18:21:55.838000 audit[2395]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:55.838000 audit[2395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc5471bd0 a2=0 a3=1 items=0 ppid=2372 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.838000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Apr 12 18:21:55.842169 kubelet[2372]: I0412 18:21:55.842132 2372 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Apr 12 18:21:55.843000 audit[2396]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2396 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:21:55.843000 audit[2396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe43a2f00 a2=0 a3=1 items=0 ppid=2372 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.843000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Apr 12 18:21:55.847428 kubelet[2372]: I0412 18:21:55.847390 2372 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Apr 12 18:21:55.847675 kubelet[2372]: I0412 18:21:55.847652 2372 status_manager.go:207] "Starting to sync pod status with apiserver" Apr 12 18:21:55.847820 kubelet[2372]: I0412 18:21:55.847799 2372 kubelet.go:2257] "Starting kubelet main sync loop" Apr 12 18:21:55.848038 kubelet[2372]: E0412 18:21:55.848017 2372 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Apr 12 18:21:55.848000 audit[2397]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:55.848000 audit[2397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc339eab0 a2=0 a3=1 items=0 ppid=2372 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.848000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Apr 12 18:21:55.854701 kubelet[2372]: W0412 18:21:55.854594 2372 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.30.133:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:55.854864 kubelet[2372]: E0412 18:21:55.854709 2372 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.30.133:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:55.854000 audit[2398]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2398 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:21:55.854000 audit[2398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe4967d90 a2=0 a3=1 items=0 ppid=2372 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.854000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Apr 12 18:21:55.855000 audit[2399]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:55.855000 audit[2399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd394b2e0 a2=0 a3=1 items=0 ppid=2372 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.855000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Apr 12 18:21:55.858960 kubelet[2372]: I0412 18:21:55.858927 2372 cpu_manager.go:214] "Starting CPU manager" policy="none" Apr 12 18:21:55.859272 kubelet[2372]: I0412 18:21:55.859249 2372 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Apr 12 18:21:55.859410 kubelet[2372]: I0412 18:21:55.859389 2372 state_mem.go:36] "Initialized new in-memory state store" Apr 12 18:21:55.859000 audit[2400]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=2400 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:21:55.859000 audit[2400]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffeed40840 a2=0 a3=1 items=0 ppid=2372 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.859000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Apr 12 18:21:55.859000 audit[2401]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:21:55.859000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff2a6af00 a2=0 a3=1 items=0 ppid=2372 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.859000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Apr 12 18:21:55.862754 kubelet[2372]: I0412 18:21:55.862720 2372 policy_none.go:49] "None policy: Start" Apr 12 18:21:55.864324 kubelet[2372]: I0412 18:21:55.864288 2372 memory_manager.go:169] "Starting memorymanager" policy="None" Apr 12 18:21:55.864475 kubelet[2372]: I0412 18:21:55.864349 2372 state_mem.go:35] "Initializing new in-memory state store" Apr 12 18:21:55.864000 audit[2402]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2402 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:21:55.864000 audit[2402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcbda8b10 a2=0 a3=1 items=0 ppid=2372 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.864000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Apr 12 18:21:55.874137 systemd[1]: Created slice kubepods.slice. Apr 12 18:21:55.883689 systemd[1]: Created slice kubepods-burstable.slice. Apr 12 18:21:55.889351 systemd[1]: Created slice kubepods-besteffort.slice. Apr 12 18:21:55.896784 kubelet[2372]: I0412 18:21:55.896751 2372 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-133" Apr 12 18:21:55.897466 kubelet[2372]: E0412 18:21:55.897440 2372 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.30.133:6443/api/v1/nodes\": dial tcp 172.31.30.133:6443: connect: connection refused" node="ip-172-31-30-133" Apr 12 18:21:55.902336 kubelet[2372]: I0412 18:21:55.902293 2372 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Apr 12 18:21:55.900000 audit[2372]: AVC avc: denied { mac_admin } for pid=2372 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:55.900000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:21:55.900000 audit[2372]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b8c870 a1=400077d0b0 a2=4000b8c840 a3=25 items=0 ppid=1 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:55.900000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:21:55.902894 kubelet[2372]: I0412 18:21:55.902452 2372 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Apr 12 18:21:55.902960 kubelet[2372]: I0412 18:21:55.902903 2372 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Apr 12 18:21:55.906953 kubelet[2372]: E0412 18:21:55.906922 2372 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-30-133\" not found" Apr 12 18:21:55.949261 kubelet[2372]: I0412 18:21:55.949208 2372 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:21:55.951232 kubelet[2372]: I0412 18:21:55.951197 2372 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:21:55.954050 kubelet[2372]: I0412 18:21:55.953886 2372 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:21:55.964706 systemd[1]: Created slice kubepods-burstable-pod10ce5315e64f416a81fd7cace9141b27.slice. Apr 12 18:21:55.978771 systemd[1]: Created slice kubepods-burstable-podc86225682b45a1d3240e667c7285082d.slice. Apr 12 18:21:55.986681 systemd[1]: Created slice kubepods-burstable-pod787a89baf75faf7a5a01a6df8c010a44.slice. Apr 12 18:21:56.000261 kubelet[2372]: E0412 18:21:56.000219 2372 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.30.133:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-133?timeout=10s\": dial tcp 172.31.30.133:6443: connect: connection refused" interval="400ms" Apr 12 18:21:56.096914 kubelet[2372]: I0412 18:21:56.096859 2372 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/10ce5315e64f416a81fd7cace9141b27-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-30-133\" (UID: \"10ce5315e64f416a81fd7cace9141b27\") " pod="kube-system/kube-controller-manager-ip-172-31-30-133" Apr 12 18:21:56.097089 kubelet[2372]: I0412 18:21:56.096934 2372 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/10ce5315e64f416a81fd7cace9141b27-k8s-certs\") pod \"kube-controller-manager-ip-172-31-30-133\" (UID: \"10ce5315e64f416a81fd7cace9141b27\") " pod="kube-system/kube-controller-manager-ip-172-31-30-133" Apr 12 18:21:56.097089 kubelet[2372]: I0412 18:21:56.097006 2372 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/10ce5315e64f416a81fd7cace9141b27-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-30-133\" (UID: \"10ce5315e64f416a81fd7cace9141b27\") " pod="kube-system/kube-controller-manager-ip-172-31-30-133" Apr 12 18:21:56.097089 kubelet[2372]: I0412 18:21:56.097054 2372 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c86225682b45a1d3240e667c7285082d-kubeconfig\") pod \"kube-scheduler-ip-172-31-30-133\" (UID: \"c86225682b45a1d3240e667c7285082d\") " pod="kube-system/kube-scheduler-ip-172-31-30-133" Apr 12 18:21:56.097272 kubelet[2372]: I0412 18:21:56.097104 2372 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/787a89baf75faf7a5a01a6df8c010a44-ca-certs\") pod \"kube-apiserver-ip-172-31-30-133\" (UID: \"787a89baf75faf7a5a01a6df8c010a44\") " pod="kube-system/kube-apiserver-ip-172-31-30-133" Apr 12 18:21:56.097272 kubelet[2372]: I0412 18:21:56.097146 2372 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/10ce5315e64f416a81fd7cace9141b27-ca-certs\") pod \"kube-controller-manager-ip-172-31-30-133\" (UID: \"10ce5315e64f416a81fd7cace9141b27\") " pod="kube-system/kube-controller-manager-ip-172-31-30-133" Apr 12 18:21:56.097272 kubelet[2372]: I0412 18:21:56.097200 2372 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/10ce5315e64f416a81fd7cace9141b27-kubeconfig\") pod \"kube-controller-manager-ip-172-31-30-133\" (UID: \"10ce5315e64f416a81fd7cace9141b27\") " pod="kube-system/kube-controller-manager-ip-172-31-30-133" Apr 12 18:21:56.097272 kubelet[2372]: I0412 18:21:56.097242 2372 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/787a89baf75faf7a5a01a6df8c010a44-k8s-certs\") pod \"kube-apiserver-ip-172-31-30-133\" (UID: \"787a89baf75faf7a5a01a6df8c010a44\") " pod="kube-system/kube-apiserver-ip-172-31-30-133" Apr 12 18:21:56.097553 kubelet[2372]: I0412 18:21:56.097292 2372 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/787a89baf75faf7a5a01a6df8c010a44-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-30-133\" (UID: \"787a89baf75faf7a5a01a6df8c010a44\") " pod="kube-system/kube-apiserver-ip-172-31-30-133" Apr 12 18:21:56.100701 kubelet[2372]: I0412 18:21:56.100650 2372 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-133" Apr 12 18:21:56.101311 kubelet[2372]: E0412 18:21:56.101275 2372 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.30.133:6443/api/v1/nodes\": dial tcp 172.31.30.133:6443: connect: connection refused" node="ip-172-31-30-133" Apr 12 18:21:56.275625 env[1688]: time="2024-04-12T18:21:56.275060634Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-30-133,Uid:10ce5315e64f416a81fd7cace9141b27,Namespace:kube-system,Attempt:0,}" Apr 12 18:21:56.283599 env[1688]: time="2024-04-12T18:21:56.283537573Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-30-133,Uid:c86225682b45a1d3240e667c7285082d,Namespace:kube-system,Attempt:0,}" Apr 12 18:21:56.292048 env[1688]: time="2024-04-12T18:21:56.291985913Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-30-133,Uid:787a89baf75faf7a5a01a6df8c010a44,Namespace:kube-system,Attempt:0,}" Apr 12 18:21:56.401638 kubelet[2372]: E0412 18:21:56.401478 2372 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.30.133:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-133?timeout=10s\": dial tcp 172.31.30.133:6443: connect: connection refused" interval="800ms" Apr 12 18:21:56.504295 kubelet[2372]: I0412 18:21:56.503875 2372 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-133" Apr 12 18:21:56.504464 kubelet[2372]: E0412 18:21:56.504385 2372 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.30.133:6443/api/v1/nodes\": dial tcp 172.31.30.133:6443: connect: connection refused" node="ip-172-31-30-133" Apr 12 18:21:56.593586 kubelet[2372]: W0412 18:21:56.593379 2372 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.30.133:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-133&limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:56.593586 kubelet[2372]: E0412 18:21:56.593478 2372 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.30.133:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-133&limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:56.781930 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2237041737.mount: Deactivated successfully. Apr 12 18:21:56.794050 env[1688]: time="2024-04-12T18:21:56.793995232Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:56.796016 env[1688]: time="2024-04-12T18:21:56.795965416Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:56.808118 env[1688]: time="2024-04-12T18:21:56.808061524Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:56.810250 env[1688]: time="2024-04-12T18:21:56.810203499Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:56.815379 env[1688]: time="2024-04-12T18:21:56.815320096Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:56.818610 env[1688]: time="2024-04-12T18:21:56.818521741Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:56.820141 env[1688]: time="2024-04-12T18:21:56.820098524Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:56.825852 env[1688]: time="2024-04-12T18:21:56.825786350Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:56.827367 env[1688]: time="2024-04-12T18:21:56.827280563Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:56.828789 env[1688]: time="2024-04-12T18:21:56.828728749Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:56.830192 env[1688]: time="2024-04-12T18:21:56.830130848Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:56.845970 env[1688]: time="2024-04-12T18:21:56.845915063Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:21:56.870388 env[1688]: time="2024-04-12T18:21:56.870244314Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:21:56.870676 env[1688]: time="2024-04-12T18:21:56.870614119Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:21:56.870870 env[1688]: time="2024-04-12T18:21:56.870824123Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:21:56.871660 env[1688]: time="2024-04-12T18:21:56.871553209Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4a9e8a2c608137a5c9886bead25696bf273771a4d15b03b1b265021e9767594f pid=2411 runtime=io.containerd.runc.v2 Apr 12 18:21:56.897248 kubelet[2372]: W0412 18:21:56.897152 2372 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.30.133:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:56.897248 kubelet[2372]: E0412 18:21:56.897244 2372 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.30.133:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:56.912272 systemd[1]: Started cri-containerd-4a9e8a2c608137a5c9886bead25696bf273771a4d15b03b1b265021e9767594f.scope. Apr 12 18:21:56.917644 kubelet[2372]: W0412 18:21:56.917574 2372 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.30.133:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:56.917931 kubelet[2372]: E0412 18:21:56.917893 2372 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.30.133:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:56.931802 env[1688]: time="2024-04-12T18:21:56.931679895Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:21:56.932229 env[1688]: time="2024-04-12T18:21:56.932158760Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:21:56.932417 env[1688]: time="2024-04-12T18:21:56.932371260Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:21:56.933250 env[1688]: time="2024-04-12T18:21:56.933173484Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/360cf59ed673f24babf63bd7ab9433605f6d73ae84ac726ca411133432bda634 pid=2443 runtime=io.containerd.runc.v2 Apr 12 18:21:56.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.950000 audit: BPF prog-id=70 op=LOAD Apr 12 18:21:56.952931 env[1688]: time="2024-04-12T18:21:56.949776724Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:21:56.952931 env[1688]: time="2024-04-12T18:21:56.949865992Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:21:56.952931 env[1688]: time="2024-04-12T18:21:56.949893799Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:21:56.952931 env[1688]: time="2024-04-12T18:21:56.950109732Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1b978c2c1fa2de1c34c5fa90bb9658b25f679cc4ce5d3660dc48942171a38158 pid=2444 runtime=io.containerd.runc.v2 Apr 12 18:21:56.952000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.952000 audit[2424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2411 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:56.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461396538613263363038313337613563393838366265616432353639 Apr 12 18:21:56.952000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.952000 audit[2424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2411 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:56.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461396538613263363038313337613563393838366265616432353639 Apr 12 18:21:56.952000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.952000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.952000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.952000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.952000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.952000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.952000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.952000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.952000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.952000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.952000 audit: BPF prog-id=71 op=LOAD Apr 12 18:21:56.952000 audit[2424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2411 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:56.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461396538613263363038313337613563393838366265616432353639 Apr 12 18:21:56.954000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.954000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.954000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.954000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.954000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.954000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.954000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.954000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.954000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.954000 audit: BPF prog-id=72 op=LOAD Apr 12 18:21:56.954000 audit[2424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2411 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:56.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461396538613263363038313337613563393838366265616432353639 Apr 12 18:21:56.955000 audit: BPF prog-id=72 op=UNLOAD Apr 12 18:21:56.956000 audit: BPF prog-id=71 op=UNLOAD Apr 12 18:21:56.956000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.956000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.956000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.956000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.956000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.956000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.956000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.956000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.956000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.956000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:56.956000 audit: BPF prog-id=73 op=LOAD Apr 12 18:21:56.956000 audit[2424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2411 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:56.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461396538613263363038313337613563393838366265616432353639 Apr 12 18:21:56.969036 systemd[1]: Started cri-containerd-360cf59ed673f24babf63bd7ab9433605f6d73ae84ac726ca411133432bda634.scope. Apr 12 18:21:56.998119 systemd[1]: Started cri-containerd-1b978c2c1fa2de1c34c5fa90bb9658b25f679cc4ce5d3660dc48942171a38158.scope. Apr 12 18:21:57.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.031000 audit: BPF prog-id=74 op=LOAD Apr 12 18:21:57.037000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.037000 audit[2483]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2444 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393738633263316661326465316333346335666139306262393635 Apr 12 18:21:57.037000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.037000 audit[2483]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2444 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393738633263316661326465316333346335666139306262393635 Apr 12 18:21:57.037000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.037000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.037000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.037000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.037000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.037000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.037000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.037000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.037000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.037000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.037000 audit: BPF prog-id=75 op=LOAD Apr 12 18:21:57.037000 audit[2483]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2444 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393738633263316661326465316333346335666139306262393635 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit: BPF prog-id=76 op=LOAD Apr 12 18:21:57.038000 audit[2483]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2444 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393738633263316661326465316333346335666139306262393635 Apr 12 18:21:57.038000 audit: BPF prog-id=76 op=UNLOAD Apr 12 18:21:57.038000 audit: BPF prog-id=75 op=UNLOAD Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.038000 audit: BPF prog-id=77 op=LOAD Apr 12 18:21:57.038000 audit[2483]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2444 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393738633263316661326465316333346335666139306262393635 Apr 12 18:21:57.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.063000 audit: BPF prog-id=78 op=LOAD Apr 12 18:21:57.066205 env[1688]: time="2024-04-12T18:21:57.063364251Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-30-133,Uid:c86225682b45a1d3240e667c7285082d,Namespace:kube-system,Attempt:0,} returns sandbox id \"4a9e8a2c608137a5c9886bead25696bf273771a4d15b03b1b265021e9767594f\"" Apr 12 18:21:57.065000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.065000 audit[2468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2443 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336306366353965643637336632346261626636336264376162393433 Apr 12 18:21:57.065000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.065000 audit[2468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2443 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336306366353965643637336632346261626636336264376162393433 Apr 12 18:21:57.065000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.065000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.065000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.065000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.065000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.065000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.065000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.065000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.065000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.065000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.065000 audit: BPF prog-id=79 op=LOAD Apr 12 18:21:57.065000 audit[2468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2443 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336306366353965643637336632346261626636336264376162393433 Apr 12 18:21:57.071000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.071000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.071000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.071000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.071000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.071000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.071000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.071000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.071000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.071000 audit: BPF prog-id=80 op=LOAD Apr 12 18:21:57.071000 audit[2468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2443 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336306366353965643637336632346261626636336264376162393433 Apr 12 18:21:57.073000 audit: BPF prog-id=80 op=UNLOAD Apr 12 18:21:57.073000 audit: BPF prog-id=79 op=UNLOAD Apr 12 18:21:57.073000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.073000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.073000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.073000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.073000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.073000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.073000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.073000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.073000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.073000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.073000 audit: BPF prog-id=81 op=LOAD Apr 12 18:21:57.073000 audit[2468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2443 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336306366353965643637336632346261626636336264376162393433 Apr 12 18:21:57.078951 env[1688]: time="2024-04-12T18:21:57.078332445Z" level=info msg="CreateContainer within sandbox \"4a9e8a2c608137a5c9886bead25696bf273771a4d15b03b1b265021e9767594f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Apr 12 18:21:57.099205 env[1688]: time="2024-04-12T18:21:57.099149461Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-30-133,Uid:787a89baf75faf7a5a01a6df8c010a44,Namespace:kube-system,Attempt:0,} returns sandbox id \"1b978c2c1fa2de1c34c5fa90bb9658b25f679cc4ce5d3660dc48942171a38158\"" Apr 12 18:21:57.107130 env[1688]: time="2024-04-12T18:21:57.107075004Z" level=info msg="CreateContainer within sandbox \"1b978c2c1fa2de1c34c5fa90bb9658b25f679cc4ce5d3660dc48942171a38158\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Apr 12 18:21:57.136637 env[1688]: time="2024-04-12T18:21:57.136549116Z" level=info msg="CreateContainer within sandbox \"4a9e8a2c608137a5c9886bead25696bf273771a4d15b03b1b265021e9767594f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"bcc7c350516fdd07abda8fed4d99d91cc00b688eb35766d3f7ff99e1c3b9ddc3\"" Apr 12 18:21:57.137750 env[1688]: time="2024-04-12T18:21:57.137699246Z" level=info msg="StartContainer for \"bcc7c350516fdd07abda8fed4d99d91cc00b688eb35766d3f7ff99e1c3b9ddc3\"" Apr 12 18:21:57.141633 env[1688]: time="2024-04-12T18:21:57.141547943Z" level=info msg="CreateContainer within sandbox \"1b978c2c1fa2de1c34c5fa90bb9658b25f679cc4ce5d3660dc48942171a38158\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"53f6f1f054d9d3e77fad552b9425bbb2f5e69c25d0444ed72511c2cceb20f669\"" Apr 12 18:21:57.142487 env[1688]: time="2024-04-12T18:21:57.142419494Z" level=info msg="StartContainer for \"53f6f1f054d9d3e77fad552b9425bbb2f5e69c25d0444ed72511c2cceb20f669\"" Apr 12 18:21:57.155156 env[1688]: time="2024-04-12T18:21:57.155082231Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-30-133,Uid:10ce5315e64f416a81fd7cace9141b27,Namespace:kube-system,Attempt:0,} returns sandbox id \"360cf59ed673f24babf63bd7ab9433605f6d73ae84ac726ca411133432bda634\"" Apr 12 18:21:57.161030 env[1688]: time="2024-04-12T18:21:57.160949440Z" level=info msg="CreateContainer within sandbox \"360cf59ed673f24babf63bd7ab9433605f6d73ae84ac726ca411133432bda634\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Apr 12 18:21:57.185040 env[1688]: time="2024-04-12T18:21:57.184962594Z" level=info msg="CreateContainer within sandbox \"360cf59ed673f24babf63bd7ab9433605f6d73ae84ac726ca411133432bda634\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"4d873aac2ee79882782d5a7c05a005e1af0586d13ddb9e8cbb69da50a2846f65\"" Apr 12 18:21:57.185917 env[1688]: time="2024-04-12T18:21:57.185855220Z" level=info msg="StartContainer for \"4d873aac2ee79882782d5a7c05a005e1af0586d13ddb9e8cbb69da50a2846f65\"" Apr 12 18:21:57.192920 systemd[1]: Started cri-containerd-53f6f1f054d9d3e77fad552b9425bbb2f5e69c25d0444ed72511c2cceb20f669.scope. Apr 12 18:21:57.203246 kubelet[2372]: E0412 18:21:57.203163 2372 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.30.133:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-133?timeout=10s\": dial tcp 172.31.30.133:6443: connect: connection refused" interval="1.6s" Apr 12 18:21:57.211487 systemd[1]: Started cri-containerd-bcc7c350516fdd07abda8fed4d99d91cc00b688eb35766d3f7ff99e1c3b9ddc3.scope. Apr 12 18:21:57.273236 systemd[1]: Started cri-containerd-4d873aac2ee79882782d5a7c05a005e1af0586d13ddb9e8cbb69da50a2846f65.scope. Apr 12 18:21:57.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.279000 audit: BPF prog-id=82 op=LOAD Apr 12 18:21:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.284000 audit: BPF prog-id=83 op=LOAD Apr 12 18:21:57.286000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.286000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2444 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533663666316630353464396433653737666164353532623934323562 Apr 12 18:21:57.286000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.295000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.295000 audit[2543]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2411 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633763333530353136666464303761626461386665643464393964 Apr 12 18:21:57.296000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.296000 audit[2543]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2411 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633763333530353136666464303761626461386665643464393964 Apr 12 18:21:57.296000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.296000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.296000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.296000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.296000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.296000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.296000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.286000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2444 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533663666316630353464396433653737666164353532623934323562 Apr 12 18:21:57.296000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.296000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.296000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.296000 audit: BPF prog-id=84 op=LOAD Apr 12 18:21:57.298000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.298000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.296000 audit[2543]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2411 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633763333530353136666464303761626461386665643464393964 Apr 12 18:21:57.298000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.298000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.298000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.298000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.298000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.298000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.298000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.299000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.298000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.298000 audit: BPF prog-id=85 op=LOAD Apr 12 18:21:57.299000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.299000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.299000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.299000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.299000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.298000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2444 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533663666316630353464396433653737666164353532623934323562 Apr 12 18:21:57.299000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.299000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.299000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.299000 audit: BPF prog-id=86 op=LOAD Apr 12 18:21:57.299000 audit[2543]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2411 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633763333530353136666464303761626461386665643464393964 Apr 12 18:21:57.301000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.301000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.301000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.301000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.301000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.301000 audit: BPF prog-id=86 op=UNLOAD Apr 12 18:21:57.301000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.301000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.301000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.302000 audit: BPF prog-id=84 op=UNLOAD Apr 12 18:21:57.301000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.301000 audit: BPF prog-id=87 op=LOAD Apr 12 18:21:57.301000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2444 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533663666316630353464396433653737666164353532623934323562 Apr 12 18:21:57.303000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.303000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.303000 audit: BPF prog-id=87 op=UNLOAD Apr 12 18:21:57.303000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.303000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.303000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.303000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.303000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.303000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.303000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.303000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.303000 audit: BPF prog-id=88 op=LOAD Apr 12 18:21:57.303000 audit[2543]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2411 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633763333530353136666464303761626461386665643464393964 Apr 12 18:21:57.304000 audit: BPF prog-id=85 op=UNLOAD Apr 12 18:21:57.304000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.304000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.304000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.304000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.304000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.308583 kubelet[2372]: I0412 18:21:57.308073 2372 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-133" Apr 12 18:21:57.304000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.304000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.304000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.304000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.309382 kubelet[2372]: E0412 18:21:57.309205 2372 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.30.133:6443/api/v1/nodes\": dial tcp 172.31.30.133:6443: connect: connection refused" node="ip-172-31-30-133" Apr 12 18:21:57.304000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.304000 audit: BPF prog-id=89 op=LOAD Apr 12 18:21:57.304000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2444 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533663666316630353464396433653737666164353532623934323562 Apr 12 18:21:57.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.316000 audit: BPF prog-id=90 op=LOAD Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2443 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464383733616163326565373938383237383264356137633035613030 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2443 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464383733616163326565373938383237383264356137633035613030 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit: BPF prog-id=91 op=LOAD Apr 12 18:21:57.318000 audit[2570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2443 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464383733616163326565373938383237383264356137633035613030 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.318000 audit: BPF prog-id=92 op=LOAD Apr 12 18:21:57.318000 audit[2570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2443 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464383733616163326565373938383237383264356137633035613030 Apr 12 18:21:57.318000 audit: BPF prog-id=92 op=UNLOAD Apr 12 18:21:57.318000 audit: BPF prog-id=91 op=UNLOAD Apr 12 18:21:57.319000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.319000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.319000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.319000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.319000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.319000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.319000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.319000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.319000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.319000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:21:57.319000 audit: BPF prog-id=93 op=LOAD Apr 12 18:21:57.319000 audit[2570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2443 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:21:57.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464383733616163326565373938383237383264356137633035613030 Apr 12 18:21:57.342265 kubelet[2372]: W0412 18:21:57.342122 2372 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.30.133:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:57.342265 kubelet[2372]: E0412 18:21:57.342206 2372 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.30.133:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.30.133:6443: connect: connection refused Apr 12 18:21:57.368914 env[1688]: time="2024-04-12T18:21:57.368841349Z" level=info msg="StartContainer for \"bcc7c350516fdd07abda8fed4d99d91cc00b688eb35766d3f7ff99e1c3b9ddc3\" returns successfully" Apr 12 18:21:57.430073 env[1688]: time="2024-04-12T18:21:57.429986069Z" level=info msg="StartContainer for \"4d873aac2ee79882782d5a7c05a005e1af0586d13ddb9e8cbb69da50a2846f65\" returns successfully" Apr 12 18:21:57.431441 env[1688]: time="2024-04-12T18:21:57.431370721Z" level=info msg="StartContainer for \"53f6f1f054d9d3e77fad552b9425bbb2f5e69c25d0444ed72511c2cceb20f669\" returns successfully" Apr 12 18:21:58.911441 kubelet[2372]: I0412 18:21:58.911394 2372 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-133" Apr 12 18:22:00.783000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:00.786471 kernel: kauditd_printk_skb: 573 callbacks suppressed Apr 12 18:22:00.786569 kernel: audit: type=1400 audit(1712946120.783:714): avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:00.783000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000eec000 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:22:00.811980 kernel: audit: type=1300 audit(1712946120.783:714): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000eec000 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:22:00.783000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:22:00.827700 kernel: audit: type=1327 audit(1712946120.783:714): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:22:00.786000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:00.839024 kernel: audit: type=1400 audit(1712946120.786:715): avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:00.786000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000edc040 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:22:00.851311 kernel: audit: type=1300 audit(1712946120.786:715): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000edc040 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:22:00.786000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:22:00.861486 kernel: audit: type=1327 audit(1712946120.786:715): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:22:01.485158 update_engine[1682]: I0412 18:22:01.484584 1682 update_attempter.cc:509] Updating boot flags... Apr 12 18:22:02.304000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:02.304000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4006b0dd40 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:22:02.327378 kernel: audit: type=1400 audit(1712946122.304:716): avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:02.327532 kernel: audit: type=1300 audit(1712946122.304:716): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4006b0dd40 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:22:02.304000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:22:02.342613 kernel: audit: type=1327 audit(1712946122.304:716): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:22:02.305000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:02.363711 kernel: audit: type=1400 audit(1712946122.305:717): avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:02.305000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4000876f00 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:22:02.305000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:22:02.308000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:02.308000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4000c87170 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:22:02.308000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:22:02.317000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:02.317000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4000c87560 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:22:02.317000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:22:02.348000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:02.348000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=67 a1=40051e5300 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:22:02.348000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:22:02.494000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:02.494000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=40031d1a70 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:22:02.494000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:22:02.632958 kubelet[2372]: E0412 18:22:02.632804 2372 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-30-133\" not found" node="ip-172-31-30-133" Apr 12 18:22:02.714478 kubelet[2372]: I0412 18:22:02.714412 2372 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-30-133" Apr 12 18:22:02.758835 kubelet[2372]: E0412 18:22:02.758660 2372 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-133.17c59b6aae79d723", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-133", UID:"ip-172-31-30-133", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-133"}, FirstTimestamp:time.Date(2024, time.April, 12, 18, 21, 55, 780400931, time.Local), LastTimestamp:time.Date(2024, time.April, 12, 18, 21, 55, 780400931, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Apr 12 18:22:02.782142 kubelet[2372]: I0412 18:22:02.782073 2372 apiserver.go:52] "Watching apiserver" Apr 12 18:22:02.796175 kubelet[2372]: I0412 18:22:02.796110 2372 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Apr 12 18:22:02.855183 kubelet[2372]: I0412 18:22:02.855132 2372 reconciler.go:41] "Reconciler: start to sync state" Apr 12 18:22:05.453738 systemd[1]: Reloading. Apr 12 18:22:05.618955 /usr/lib/systemd/system-generators/torcx-generator[2759]: time="2024-04-12T18:22:05Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.3 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.3 /var/lib/torcx/store]" Apr 12 18:22:05.619020 /usr/lib/systemd/system-generators/torcx-generator[2759]: time="2024-04-12T18:22:05Z" level=info msg="torcx already run" Apr 12 18:22:05.810656 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Apr 12 18:22:05.810899 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Apr 12 18:22:05.820000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:05.823601 kernel: kauditd_printk_skb: 14 callbacks suppressed Apr 12 18:22:05.823674 kernel: audit: type=1400 audit(1712946125.820:722): avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:05.820000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40007b7fc0 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:22:05.849246 kernel: audit: type=1300 audit(1712946125.820:722): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40007b7fc0 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:22:05.820000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:22:05.865577 kernel: audit: type=1327 audit(1712946125.820:722): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:22:05.836000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:05.874649 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Apr 12 18:22:05.878360 kernel: audit: type=1400 audit(1712946125.836:723): avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:05.836000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a741e0 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:22:05.895564 kernel: audit: type=1300 audit(1712946125.836:723): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a741e0 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:22:05.836000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:22:05.915295 kernel: audit: type=1327 audit(1712946125.836:723): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:22:05.836000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:05.939751 kernel: audit: type=1400 audit(1712946125.836:724): avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:05.836000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a74560 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:22:05.953296 kernel: audit: type=1300 audit(1712946125.836:724): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a74560 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:22:05.836000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:22:05.966334 kernel: audit: type=1327 audit(1712946125.836:724): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:22:05.838000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:05.977396 kernel: audit: type=1400 audit(1712946125.838:725): avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:22:05.838000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a74780 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:22:05.838000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:22:06.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.118000 audit: BPF prog-id=94 op=LOAD Apr 12 18:22:06.118000 audit: BPF prog-id=55 op=UNLOAD Apr 12 18:22:06.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.119000 audit: BPF prog-id=95 op=LOAD Apr 12 18:22:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.120000 audit: BPF prog-id=96 op=LOAD Apr 12 18:22:06.120000 audit: BPF prog-id=56 op=UNLOAD Apr 12 18:22:06.120000 audit: BPF prog-id=57 op=UNLOAD Apr 12 18:22:06.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.126000 audit: BPF prog-id=97 op=LOAD Apr 12 18:22:06.126000 audit: BPF prog-id=83 op=UNLOAD Apr 12 18:22:06.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.129000 audit: BPF prog-id=98 op=LOAD Apr 12 18:22:06.129000 audit: BPF prog-id=58 op=UNLOAD Apr 12 18:22:06.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.131000 audit: BPF prog-id=99 op=LOAD Apr 12 18:22:06.131000 audit: BPF prog-id=82 op=UNLOAD Apr 12 18:22:06.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.133000 audit: BPF prog-id=100 op=LOAD Apr 12 18:22:06.133000 audit: BPF prog-id=78 op=UNLOAD Apr 12 18:22:06.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.137000 audit: BPF prog-id=101 op=LOAD Apr 12 18:22:06.137000 audit: BPF prog-id=59 op=UNLOAD Apr 12 18:22:06.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.139000 audit: BPF prog-id=102 op=LOAD Apr 12 18:22:06.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.140000 audit: BPF prog-id=103 op=LOAD Apr 12 18:22:06.140000 audit: BPF prog-id=60 op=UNLOAD Apr 12 18:22:06.140000 audit: BPF prog-id=61 op=UNLOAD Apr 12 18:22:06.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.144000 audit: BPF prog-id=104 op=LOAD Apr 12 18:22:06.145000 audit: BPF prog-id=74 op=UNLOAD Apr 12 18:22:06.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.146000 audit: BPF prog-id=105 op=LOAD Apr 12 18:22:06.146000 audit: BPF prog-id=70 op=UNLOAD Apr 12 18:22:06.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.149000 audit: BPF prog-id=106 op=LOAD Apr 12 18:22:06.150000 audit: BPF prog-id=62 op=UNLOAD Apr 12 18:22:06.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.153000 audit: BPF prog-id=107 op=LOAD Apr 12 18:22:06.154000 audit: BPF prog-id=63 op=UNLOAD Apr 12 18:22:06.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit: BPF prog-id=108 op=LOAD Apr 12 18:22:06.156000 audit: BPF prog-id=64 op=UNLOAD Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.157000 audit: BPF prog-id=109 op=LOAD Apr 12 18:22:06.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.157000 audit: BPF prog-id=110 op=LOAD Apr 12 18:22:06.157000 audit: BPF prog-id=65 op=UNLOAD Apr 12 18:22:06.157000 audit: BPF prog-id=66 op=UNLOAD Apr 12 18:22:06.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit: BPF prog-id=111 op=LOAD Apr 12 18:22:06.161000 audit: BPF prog-id=67 op=UNLOAD Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit: BPF prog-id=112 op=LOAD Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.161000 audit: BPF prog-id=113 op=LOAD Apr 12 18:22:06.161000 audit: BPF prog-id=68 op=UNLOAD Apr 12 18:22:06.161000 audit: BPF prog-id=69 op=UNLOAD Apr 12 18:22:06.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.165000 audit: BPF prog-id=114 op=LOAD Apr 12 18:22:06.165000 audit: BPF prog-id=90 op=UNLOAD Apr 12 18:22:06.227066 kubelet[2372]: I0412 18:22:06.227008 2372 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Apr 12 18:22:06.231031 systemd[1]: Stopping kubelet.service... Apr 12 18:22:06.246143 systemd[1]: kubelet.service: Deactivated successfully. Apr 12 18:22:06.246608 systemd[1]: Stopped kubelet.service. Apr 12 18:22:06.245000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:22:06.246714 systemd[1]: kubelet.service: Consumed 2.616s CPU time. Apr 12 18:22:06.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:22:06.250354 systemd[1]: Started kubelet.service. Apr 12 18:22:06.386125 kubelet[2815]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Apr 12 18:22:06.386741 kubelet[2815]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Apr 12 18:22:06.386843 kubelet[2815]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Apr 12 18:22:06.387142 kubelet[2815]: I0412 18:22:06.387078 2815 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Apr 12 18:22:06.396046 kubelet[2815]: I0412 18:22:06.396008 2815 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Apr 12 18:22:06.396227 kubelet[2815]: I0412 18:22:06.396205 2815 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Apr 12 18:22:06.396905 kubelet[2815]: I0412 18:22:06.396870 2815 server.go:837] "Client rotation is on, will bootstrap in background" Apr 12 18:22:06.400391 kubelet[2815]: I0412 18:22:06.400351 2815 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Apr 12 18:22:06.404770 kubelet[2815]: I0412 18:22:06.404707 2815 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Apr 12 18:22:06.406294 kubelet[2815]: W0412 18:22:06.406261 2815 machine.go:65] Cannot read vendor id correctly, set empty. Apr 12 18:22:06.408105 kubelet[2815]: I0412 18:22:06.408069 2815 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Apr 12 18:22:06.408780 kubelet[2815]: I0412 18:22:06.408751 2815 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Apr 12 18:22:06.409101 kubelet[2815]: I0412 18:22:06.409075 2815 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Apr 12 18:22:06.409388 kubelet[2815]: I0412 18:22:06.409348 2815 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Apr 12 18:22:06.409621 kubelet[2815]: I0412 18:22:06.409600 2815 container_manager_linux.go:302] "Creating device plugin manager" Apr 12 18:22:06.409830 kubelet[2815]: I0412 18:22:06.409787 2815 state_mem.go:36] "Initialized new in-memory state store" Apr 12 18:22:06.421099 kubelet[2815]: I0412 18:22:06.421061 2815 kubelet.go:405] "Attempting to sync node with API server" Apr 12 18:22:06.421362 kubelet[2815]: I0412 18:22:06.421340 2815 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Apr 12 18:22:06.421586 kubelet[2815]: I0412 18:22:06.421563 2815 kubelet.go:309] "Adding apiserver pod source" Apr 12 18:22:06.421756 kubelet[2815]: I0412 18:22:06.421734 2815 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Apr 12 18:22:06.425034 kubelet[2815]: I0412 18:22:06.424955 2815 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Apr 12 18:22:06.426915 kubelet[2815]: I0412 18:22:06.426856 2815 server.go:1168] "Started kubelet" Apr 12 18:22:06.430000 audit[2815]: AVC avc: denied { mac_admin } for pid=2815 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.430000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:22:06.433639 kubelet[2815]: I0412 18:22:06.427291 2815 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Apr 12 18:22:06.434374 kubelet[2815]: I0412 18:22:06.432705 2815 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Apr 12 18:22:06.435947 kubelet[2815]: I0412 18:22:06.435891 2815 server.go:461] "Adding debug handlers to kubelet server" Apr 12 18:22:06.430000 audit[2815]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000cdc060 a1=4000812b88 a2=4000cdc030 a3=25 items=0 ppid=1 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:06.430000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:22:06.455372 kubelet[2815]: I0412 18:22:06.455327 2815 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Apr 12 18:22:06.454000 audit[2815]: AVC avc: denied { mac_admin } for pid=2815 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.454000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:22:06.454000 audit[2815]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b7b980 a1=4000812df8 a2=4000cdcd20 a3=25 items=0 ppid=1 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:06.454000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:22:06.456572 kubelet[2815]: I0412 18:22:06.456537 2815 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Apr 12 18:22:06.459642 kubelet[2815]: I0412 18:22:06.459599 2815 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Apr 12 18:22:06.476487 kubelet[2815]: I0412 18:22:06.476434 2815 volume_manager.go:284] "Starting Kubelet Volume Manager" Apr 12 18:22:06.491968 kubelet[2815]: I0412 18:22:06.491926 2815 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Apr 12 18:22:06.504709 kubelet[2815]: E0412 18:22:06.504669 2815 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Apr 12 18:22:06.515028 kubelet[2815]: E0412 18:22:06.514989 2815 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Apr 12 18:22:06.586831 kubelet[2815]: I0412 18:22:06.586795 2815 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-133" Apr 12 18:22:06.615816 kubelet[2815]: I0412 18:22:06.615764 2815 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Apr 12 18:22:06.620293 kubelet[2815]: I0412 18:22:06.620234 2815 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-30-133" Apr 12 18:22:06.624402 kubelet[2815]: I0412 18:22:06.624346 2815 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-30-133" Apr 12 18:22:06.661766 kubelet[2815]: I0412 18:22:06.661634 2815 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Apr 12 18:22:06.661980 kubelet[2815]: I0412 18:22:06.661957 2815 status_manager.go:207] "Starting to sync pod status with apiserver" Apr 12 18:22:06.662134 kubelet[2815]: I0412 18:22:06.662113 2815 kubelet.go:2257] "Starting kubelet main sync loop" Apr 12 18:22:06.662354 kubelet[2815]: E0412 18:22:06.662334 2815 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Apr 12 18:22:06.729451 kubelet[2815]: I0412 18:22:06.729416 2815 cpu_manager.go:214] "Starting CPU manager" policy="none" Apr 12 18:22:06.729706 kubelet[2815]: I0412 18:22:06.729683 2815 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Apr 12 18:22:06.729831 kubelet[2815]: I0412 18:22:06.729811 2815 state_mem.go:36] "Initialized new in-memory state store" Apr 12 18:22:06.730198 kubelet[2815]: I0412 18:22:06.730174 2815 state_mem.go:88] "Updated default CPUSet" cpuSet="" Apr 12 18:22:06.730326 kubelet[2815]: I0412 18:22:06.730306 2815 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Apr 12 18:22:06.730431 kubelet[2815]: I0412 18:22:06.730411 2815 policy_none.go:49] "None policy: Start" Apr 12 18:22:06.731938 kubelet[2815]: I0412 18:22:06.731904 2815 memory_manager.go:169] "Starting memorymanager" policy="None" Apr 12 18:22:06.732139 kubelet[2815]: I0412 18:22:06.732117 2815 state_mem.go:35] "Initializing new in-memory state store" Apr 12 18:22:06.732481 kubelet[2815]: I0412 18:22:06.732458 2815 state_mem.go:75] "Updated machine memory state" Apr 12 18:22:06.745972 kubelet[2815]: I0412 18:22:06.745931 2815 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Apr 12 18:22:06.747000 audit[2815]: AVC avc: denied { mac_admin } for pid=2815 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:06.747000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:22:06.747000 audit[2815]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4001300b40 a1=4001368048 a2=4001300b10 a3=25 items=0 ppid=1 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:06.747000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:22:06.750942 kubelet[2815]: I0412 18:22:06.748657 2815 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Apr 12 18:22:06.757286 kubelet[2815]: I0412 18:22:06.757239 2815 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Apr 12 18:22:06.776236 kubelet[2815]: I0412 18:22:06.776186 2815 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:22:06.778552 kubelet[2815]: I0412 18:22:06.776492 2815 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:22:06.778901 kubelet[2815]: I0412 18:22:06.778867 2815 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:22:06.797709 kubelet[2815]: I0412 18:22:06.797668 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c86225682b45a1d3240e667c7285082d-kubeconfig\") pod \"kube-scheduler-ip-172-31-30-133\" (UID: \"c86225682b45a1d3240e667c7285082d\") " pod="kube-system/kube-scheduler-ip-172-31-30-133" Apr 12 18:22:06.798009 kubelet[2815]: I0412 18:22:06.797987 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/787a89baf75faf7a5a01a6df8c010a44-ca-certs\") pod \"kube-apiserver-ip-172-31-30-133\" (UID: \"787a89baf75faf7a5a01a6df8c010a44\") " pod="kube-system/kube-apiserver-ip-172-31-30-133" Apr 12 18:22:06.798182 kubelet[2815]: I0412 18:22:06.798161 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/787a89baf75faf7a5a01a6df8c010a44-k8s-certs\") pod \"kube-apiserver-ip-172-31-30-133\" (UID: \"787a89baf75faf7a5a01a6df8c010a44\") " pod="kube-system/kube-apiserver-ip-172-31-30-133" Apr 12 18:22:06.798325 kubelet[2815]: I0412 18:22:06.798303 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/10ce5315e64f416a81fd7cace9141b27-k8s-certs\") pod \"kube-controller-manager-ip-172-31-30-133\" (UID: \"10ce5315e64f416a81fd7cace9141b27\") " pod="kube-system/kube-controller-manager-ip-172-31-30-133" Apr 12 18:22:06.798466 kubelet[2815]: I0412 18:22:06.798445 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/10ce5315e64f416a81fd7cace9141b27-kubeconfig\") pod \"kube-controller-manager-ip-172-31-30-133\" (UID: \"10ce5315e64f416a81fd7cace9141b27\") " pod="kube-system/kube-controller-manager-ip-172-31-30-133" Apr 12 18:22:06.798649 kubelet[2815]: I0412 18:22:06.798626 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/787a89baf75faf7a5a01a6df8c010a44-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-30-133\" (UID: \"787a89baf75faf7a5a01a6df8c010a44\") " pod="kube-system/kube-apiserver-ip-172-31-30-133" Apr 12 18:22:06.798900 kubelet[2815]: I0412 18:22:06.798877 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/10ce5315e64f416a81fd7cace9141b27-ca-certs\") pod \"kube-controller-manager-ip-172-31-30-133\" (UID: \"10ce5315e64f416a81fd7cace9141b27\") " pod="kube-system/kube-controller-manager-ip-172-31-30-133" Apr 12 18:22:06.799146 kubelet[2815]: I0412 18:22:06.799124 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/10ce5315e64f416a81fd7cace9141b27-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-30-133\" (UID: \"10ce5315e64f416a81fd7cace9141b27\") " pod="kube-system/kube-controller-manager-ip-172-31-30-133" Apr 12 18:22:06.799320 kubelet[2815]: I0412 18:22:06.799297 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/10ce5315e64f416a81fd7cace9141b27-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-30-133\" (UID: \"10ce5315e64f416a81fd7cace9141b27\") " pod="kube-system/kube-controller-manager-ip-172-31-30-133" Apr 12 18:22:06.815975 kubelet[2815]: E0412 18:22:06.815924 2815 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-30-133\" already exists" pod="kube-system/kube-apiserver-ip-172-31-30-133" Apr 12 18:22:07.440955 kubelet[2815]: I0412 18:22:07.440884 2815 apiserver.go:52] "Watching apiserver" Apr 12 18:22:07.492639 kubelet[2815]: I0412 18:22:07.492573 2815 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Apr 12 18:22:07.505017 kubelet[2815]: I0412 18:22:07.504950 2815 reconciler.go:41] "Reconciler: start to sync state" Apr 12 18:22:07.726435 kubelet[2815]: I0412 18:22:07.726293 2815 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-30-133" podStartSLOduration=1.726218705 podCreationTimestamp="2024-04-12 18:22:06 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:22:07.708813141 +0000 UTC m=+1.444418979" watchObservedRunningTime="2024-04-12 18:22:07.726218705 +0000 UTC m=+1.461824507" Apr 12 18:22:07.773482 kubelet[2815]: I0412 18:22:07.773425 2815 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-30-133" podStartSLOduration=1.773369743 podCreationTimestamp="2024-04-12 18:22:06 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:22:07.739316222 +0000 UTC m=+1.474922060" watchObservedRunningTime="2024-04-12 18:22:07.773369743 +0000 UTC m=+1.508975581" Apr 12 18:22:13.512640 sudo[1960]: pam_unix(sudo:session): session closed for user root Apr 12 18:22:13.512000 audit[1960]: USER_END pid=1960 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:22:13.515460 kernel: kauditd_printk_skb: 260 callbacks suppressed Apr 12 18:22:13.515629 kernel: audit: type=1106 audit(1712946133.512:975): pid=1960 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:22:13.512000 audit[1960]: CRED_DISP pid=1960 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:22:13.532534 kernel: audit: type=1104 audit(1712946133.512:976): pid=1960 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:22:13.536852 sshd[1957]: pam_unix(sshd:session): session closed for user core Apr 12 18:22:13.538000 audit[1957]: USER_END pid=1957 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:22:13.538000 audit[1957]: CRED_DISP pid=1957 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:22:13.561181 kernel: audit: type=1106 audit(1712946133.538:977): pid=1957 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:22:13.561324 kernel: audit: type=1104 audit(1712946133.538:978): pid=1957 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:22:13.551684 systemd[1]: sshd@6-172.31.30.133:22-139.178.89.65:46912.service: Deactivated successfully. Apr 12 18:22:13.552977 systemd[1]: session-7.scope: Deactivated successfully. Apr 12 18:22:13.553304 systemd[1]: session-7.scope: Consumed 10.266s CPU time. Apr 12 18:22:13.562189 systemd-logind[1680]: Session 7 logged out. Waiting for processes to exit. Apr 12 18:22:13.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.30.133:22-139.178.89.65:46912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:22:13.572291 kernel: audit: type=1131 audit(1712946133.551:979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.30.133:22-139.178.89.65:46912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:22:13.572998 systemd-logind[1680]: Removed session 7. Apr 12 18:22:16.365000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Apr 12 18:22:16.365000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000f4b2c0 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:22:16.390312 kernel: audit: type=1400 audit(1712946136.365:980): avc: denied { watch } for pid=2597 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Apr 12 18:22:16.390478 kernel: audit: type=1300 audit(1712946136.365:980): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000f4b2c0 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:22:16.365000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:22:16.404281 kernel: audit: type=1327 audit(1712946136.365:980): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:22:18.255327 kubelet[2815]: I0412 18:22:18.255052 2815 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Apr 12 18:22:18.256794 env[1688]: time="2024-04-12T18:22:18.256721048Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Apr 12 18:22:18.258127 kubelet[2815]: I0412 18:22:18.257838 2815 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Apr 12 18:22:19.068445 kubelet[2815]: I0412 18:22:19.068403 2815 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:22:19.079352 systemd[1]: Created slice kubepods-besteffort-poda6401849_a209_4108_9d6a_459796c81b1b.slice. Apr 12 18:22:19.208430 kubelet[2815]: I0412 18:22:19.208364 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a6401849-a209-4108-9d6a-459796c81b1b-lib-modules\") pod \"kube-proxy-nznrl\" (UID: \"a6401849-a209-4108-9d6a-459796c81b1b\") " pod="kube-system/kube-proxy-nznrl" Apr 12 18:22:19.208776 kubelet[2815]: I0412 18:22:19.208748 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p2jfn\" (UniqueName: \"kubernetes.io/projected/a6401849-a209-4108-9d6a-459796c81b1b-kube-api-access-p2jfn\") pod \"kube-proxy-nznrl\" (UID: \"a6401849-a209-4108-9d6a-459796c81b1b\") " pod="kube-system/kube-proxy-nznrl" Apr 12 18:22:19.208955 kubelet[2815]: I0412 18:22:19.208933 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/a6401849-a209-4108-9d6a-459796c81b1b-kube-proxy\") pod \"kube-proxy-nznrl\" (UID: \"a6401849-a209-4108-9d6a-459796c81b1b\") " pod="kube-system/kube-proxy-nznrl" Apr 12 18:22:19.209096 kubelet[2815]: I0412 18:22:19.209074 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a6401849-a209-4108-9d6a-459796c81b1b-xtables-lock\") pod \"kube-proxy-nznrl\" (UID: \"a6401849-a209-4108-9d6a-459796c81b1b\") " pod="kube-system/kube-proxy-nznrl" Apr 12 18:22:19.228267 kubelet[2815]: I0412 18:22:19.228218 2815 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:22:19.239063 systemd[1]: Created slice kubepods-besteffort-pod8e11f567_b415_4a54_b096_0a080a7f77e3.slice. Apr 12 18:22:19.240066 kubelet[2815]: W0412 18:22:19.240033 2815 reflector.go:533] object-"tigera-operator"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:22:19.240316 kubelet[2815]: E0412 18:22:19.240293 2815 reflector.go:148] object-"tigera-operator"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:22:19.240589 kubelet[2815]: W0412 18:22:19.240566 2815 reflector.go:533] object-"tigera-operator"/"kubernetes-services-endpoint": failed to list *v1.ConfigMap: configmaps "kubernetes-services-endpoint" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:22:19.240753 kubelet[2815]: E0412 18:22:19.240732 2815 reflector.go:148] object-"tigera-operator"/"kubernetes-services-endpoint": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kubernetes-services-endpoint" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:22:19.310122 kubelet[2815]: I0412 18:22:19.310078 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/8e11f567-b415-4a54-b096-0a080a7f77e3-var-lib-calico\") pod \"tigera-operator-786dc9d695-p42mx\" (UID: \"8e11f567-b415-4a54-b096-0a080a7f77e3\") " pod="tigera-operator/tigera-operator-786dc9d695-p42mx" Apr 12 18:22:19.310856 kubelet[2815]: I0412 18:22:19.310232 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-27b5n\" (UniqueName: \"kubernetes.io/projected/8e11f567-b415-4a54-b096-0a080a7f77e3-kube-api-access-27b5n\") pod \"tigera-operator-786dc9d695-p42mx\" (UID: \"8e11f567-b415-4a54-b096-0a080a7f77e3\") " pod="tigera-operator/tigera-operator-786dc9d695-p42mx" Apr 12 18:22:19.393934 env[1688]: time="2024-04-12T18:22:19.393762295Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-nznrl,Uid:a6401849-a209-4108-9d6a-459796c81b1b,Namespace:kube-system,Attempt:0,}" Apr 12 18:22:19.434353 env[1688]: time="2024-04-12T18:22:19.434215037Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:22:19.434353 env[1688]: time="2024-04-12T18:22:19.434295789Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:22:19.434749 env[1688]: time="2024-04-12T18:22:19.434351568Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:22:19.435314 env[1688]: time="2024-04-12T18:22:19.434931496Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f6ee69770a18ac4fe39374fbba51faa21f38065e7993d7d2ceda86306c70c6fa pid=2898 runtime=io.containerd.runc.v2 Apr 12 18:22:19.463979 systemd[1]: run-containerd-runc-k8s.io-f6ee69770a18ac4fe39374fbba51faa21f38065e7993d7d2ceda86306c70c6fa-runc.I2J0yX.mount: Deactivated successfully. Apr 12 18:22:19.474570 systemd[1]: Started cri-containerd-f6ee69770a18ac4fe39374fbba51faa21f38065e7993d7d2ceda86306c70c6fa.scope. Apr 12 18:22:19.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.518825 kernel: audit: type=1400 audit(1712946139.502:981): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.518949 kernel: audit: type=1400 audit(1712946139.502:982): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.518999 kernel: audit: type=1400 audit(1712946139.502:983): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.526164 kernel: audit: type=1400 audit(1712946139.502:984): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.533584 kernel: audit: type=1400 audit(1712946139.502:985): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.548280 kernel: audit: type=1400 audit(1712946139.502:986): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.548495 kernel: audit: type=1400 audit(1712946139.502:987): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.563257 kernel: audit: type=1400 audit(1712946139.502:988): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.563369 kernel: audit: type=1400 audit(1712946139.502:989): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.577996 kernel: audit: type=1400 audit(1712946139.502:990): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.502000 audit: BPF prog-id=115 op=LOAD Apr 12 18:22:19.513000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.513000 audit[2910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2898 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636656536393737306131386163346665333933373466626261353166 Apr 12 18:22:19.513000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.513000 audit[2910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2898 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636656536393737306131386163346665333933373466626261353166 Apr 12 18:22:19.514000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.514000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.514000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.514000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.514000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.514000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.514000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.514000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.514000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.514000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.514000 audit: BPF prog-id=116 op=LOAD Apr 12 18:22:19.514000 audit[2910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2898 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636656536393737306131386163346665333933373466626261353166 Apr 12 18:22:19.518000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.518000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.518000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.518000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.518000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.518000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.518000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.518000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.518000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.518000 audit: BPF prog-id=117 op=LOAD Apr 12 18:22:19.518000 audit[2910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2898 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636656536393737306131386163346665333933373466626261353166 Apr 12 18:22:19.525000 audit: BPF prog-id=117 op=UNLOAD Apr 12 18:22:19.526000 audit: BPF prog-id=116 op=UNLOAD Apr 12 18:22:19.526000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.526000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.526000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.526000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.526000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.526000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.526000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.526000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.526000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.526000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.526000 audit: BPF prog-id=118 op=LOAD Apr 12 18:22:19.526000 audit[2910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2898 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636656536393737306131386163346665333933373466626261353166 Apr 12 18:22:19.601954 env[1688]: time="2024-04-12T18:22:19.601899930Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-nznrl,Uid:a6401849-a209-4108-9d6a-459796c81b1b,Namespace:kube-system,Attempt:0,} returns sandbox id \"f6ee69770a18ac4fe39374fbba51faa21f38065e7993d7d2ceda86306c70c6fa\"" Apr 12 18:22:19.610887 env[1688]: time="2024-04-12T18:22:19.610811801Z" level=info msg="CreateContainer within sandbox \"f6ee69770a18ac4fe39374fbba51faa21f38065e7993d7d2ceda86306c70c6fa\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Apr 12 18:22:19.644283 env[1688]: time="2024-04-12T18:22:19.644122830Z" level=info msg="CreateContainer within sandbox \"f6ee69770a18ac4fe39374fbba51faa21f38065e7993d7d2ceda86306c70c6fa\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"6db3ed1337cb59f69c18caf9bc24edc46b459dc2d01a642b25b537f54f062674\"" Apr 12 18:22:19.647913 env[1688]: time="2024-04-12T18:22:19.647858154Z" level=info msg="StartContainer for \"6db3ed1337cb59f69c18caf9bc24edc46b459dc2d01a642b25b537f54f062674\"" Apr 12 18:22:19.679758 systemd[1]: Started cri-containerd-6db3ed1337cb59f69c18caf9bc24edc46b459dc2d01a642b25b537f54f062674.scope. Apr 12 18:22:19.724000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.724000 audit[2943]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2898 pid=2943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664623365643133333763623539663639633138636166396263323465 Apr 12 18:22:19.724000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.724000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.724000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.724000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.724000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.724000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.724000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.724000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.724000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.724000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.724000 audit: BPF prog-id=119 op=LOAD Apr 12 18:22:19.724000 audit[2943]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2898 pid=2943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664623365643133333763623539663639633138636166396263323465 Apr 12 18:22:19.726000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.726000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.726000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.726000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.726000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.726000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.726000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.726000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.726000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.726000 audit: BPF prog-id=120 op=LOAD Apr 12 18:22:19.726000 audit[2943]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2898 pid=2943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664623365643133333763623539663639633138636166396263323465 Apr 12 18:22:19.727000 audit: BPF prog-id=120 op=UNLOAD Apr 12 18:22:19.727000 audit: BPF prog-id=119 op=UNLOAD Apr 12 18:22:19.727000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.727000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.727000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.727000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.727000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.727000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.727000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.727000 audit[2943]: AVC avc: denied { perfmon } for pid=2943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.727000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.727000 audit[2943]: AVC avc: denied { bpf } for pid=2943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:19.727000 audit: BPF prog-id=121 op=LOAD Apr 12 18:22:19.727000 audit[2943]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2898 pid=2943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664623365643133333763623539663639633138636166396263323465 Apr 12 18:22:19.759057 env[1688]: time="2024-04-12T18:22:19.758993303Z" level=info msg="StartContainer for \"6db3ed1337cb59f69c18caf9bc24edc46b459dc2d01a642b25b537f54f062674\" returns successfully" Apr 12 18:22:19.883000 audit[2992]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2992 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:19.883000 audit[2992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdfca7d00 a2=0 a3=1 items=0 ppid=2954 pid=2992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.883000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Apr 12 18:22:19.888000 audit[2993]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2993 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:19.888000 audit[2993]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc889bc70 a2=0 a3=1 items=0 ppid=2954 pid=2993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.888000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Apr 12 18:22:19.892000 audit[2994]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2994 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:19.892000 audit[2994]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff67deba0 a2=0 a3=1 items=0 ppid=2954 pid=2994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.892000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Apr 12 18:22:19.902000 audit[2996]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2996 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:19.902000 audit[2996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe0d637c0 a2=0 a3=1 items=0 ppid=2954 pid=2996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.902000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Apr 12 18:22:19.908000 audit[2997]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2997 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:19.908000 audit[2997]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffcb806b0 a2=0 a3=1 items=0 ppid=2954 pid=2997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.908000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Apr 12 18:22:19.911000 audit[2998]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2998 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:19.911000 audit[2998]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc10b48a0 a2=0 a3=1 items=0 ppid=2954 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.911000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Apr 12 18:22:19.989000 audit[2999]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2999 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:19.989000 audit[2999]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff9e38630 a2=0 a3=1 items=0 ppid=2954 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.989000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Apr 12 18:22:19.995000 audit[3001]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3001 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:19.995000 audit[3001]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe0e60d90 a2=0 a3=1 items=0 ppid=2954 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:19.995000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Apr 12 18:22:20.002000 audit[3004]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3004 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.002000 audit[3004]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc685e200 a2=0 a3=1 items=0 ppid=2954 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.002000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Apr 12 18:22:20.004000 audit[3005]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3005 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.004000 audit[3005]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffca676760 a2=0 a3=1 items=0 ppid=2954 pid=3005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.004000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Apr 12 18:22:20.009000 audit[3007]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3007 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.009000 audit[3007]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe4221970 a2=0 a3=1 items=0 ppid=2954 pid=3007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.009000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Apr 12 18:22:20.012000 audit[3008]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3008 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.012000 audit[3008]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcb491d30 a2=0 a3=1 items=0 ppid=2954 pid=3008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.012000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Apr 12 18:22:20.017000 audit[3010]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3010 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.017000 audit[3010]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe1c86030 a2=0 a3=1 items=0 ppid=2954 pid=3010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.017000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Apr 12 18:22:20.024000 audit[3013]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3013 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.024000 audit[3013]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff78e94b0 a2=0 a3=1 items=0 ppid=2954 pid=3013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.024000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Apr 12 18:22:20.027000 audit[3014]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3014 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.027000 audit[3014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffee4aa0e0 a2=0 a3=1 items=0 ppid=2954 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.027000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Apr 12 18:22:20.034000 audit[3016]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3016 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.034000 audit[3016]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffb86a2d0 a2=0 a3=1 items=0 ppid=2954 pid=3016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.034000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Apr 12 18:22:20.036000 audit[3017]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3017 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.036000 audit[3017]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeccebdf0 a2=0 a3=1 items=0 ppid=2954 pid=3017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.036000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Apr 12 18:22:20.041000 audit[3019]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3019 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.041000 audit[3019]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc9ed0920 a2=0 a3=1 items=0 ppid=2954 pid=3019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.041000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Apr 12 18:22:20.048000 audit[3022]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3022 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.048000 audit[3022]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff93dad60 a2=0 a3=1 items=0 ppid=2954 pid=3022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.048000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Apr 12 18:22:20.056000 audit[3025]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3025 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.056000 audit[3025]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffeb37da40 a2=0 a3=1 items=0 ppid=2954 pid=3025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.056000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Apr 12 18:22:20.058000 audit[3026]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3026 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.058000 audit[3026]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd2edbd40 a2=0 a3=1 items=0 ppid=2954 pid=3026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.058000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Apr 12 18:22:20.063000 audit[3028]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3028 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.063000 audit[3028]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffffac34cf0 a2=0 a3=1 items=0 ppid=2954 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.063000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Apr 12 18:22:20.070000 audit[3031]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3031 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.070000 audit[3031]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd073adf0 a2=0 a3=1 items=0 ppid=2954 pid=3031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.070000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Apr 12 18:22:20.081000 audit[3036]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3036 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.081000 audit[3036]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffec881190 a2=0 a3=1 items=0 ppid=2954 pid=3036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.081000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Apr 12 18:22:20.088000 audit[3038]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3038 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:22:20.088000 audit[3038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd236d540 a2=0 a3=1 items=0 ppid=2954 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.088000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Apr 12 18:22:20.143000 audit[3040]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3040 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:20.143000 audit[3040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=fffff9f07ec0 a2=0 a3=1 items=0 ppid=2954 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.143000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:20.157000 audit[3040]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3040 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:20.157000 audit[3040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=fffff9f07ec0 a2=0 a3=1 items=0 ppid=2954 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.157000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:20.162000 audit[3046]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3046 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.162000 audit[3046]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffeb065810 a2=0 a3=1 items=0 ppid=2954 pid=3046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.162000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Apr 12 18:22:20.168000 audit[3048]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3048 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.168000 audit[3048]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffee368870 a2=0 a3=1 items=0 ppid=2954 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.168000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Apr 12 18:22:20.177000 audit[3051]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3051 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.177000 audit[3051]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffcea58cf0 a2=0 a3=1 items=0 ppid=2954 pid=3051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.177000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Apr 12 18:22:20.179000 audit[3052]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3052 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.179000 audit[3052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffebc10c40 a2=0 a3=1 items=0 ppid=2954 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.179000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Apr 12 18:22:20.184000 audit[3054]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3054 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.184000 audit[3054]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd399b0c0 a2=0 a3=1 items=0 ppid=2954 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.184000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Apr 12 18:22:20.187000 audit[3055]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3055 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.187000 audit[3055]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff117eac0 a2=0 a3=1 items=0 ppid=2954 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.187000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Apr 12 18:22:20.192000 audit[3057]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3057 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.192000 audit[3057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe4f87550 a2=0 a3=1 items=0 ppid=2954 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.192000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Apr 12 18:22:20.200000 audit[3060]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3060 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.200000 audit[3060]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff6f11d60 a2=0 a3=1 items=0 ppid=2954 pid=3060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.200000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Apr 12 18:22:20.202000 audit[3061]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3061 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.202000 audit[3061]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffec3498c0 a2=0 a3=1 items=0 ppid=2954 pid=3061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.202000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Apr 12 18:22:20.207000 audit[3063]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3063 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.207000 audit[3063]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffea243e60 a2=0 a3=1 items=0 ppid=2954 pid=3063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.207000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Apr 12 18:22:20.210000 audit[3064]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3064 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.210000 audit[3064]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff5408f70 a2=0 a3=1 items=0 ppid=2954 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.210000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Apr 12 18:22:20.215000 audit[3066]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3066 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.215000 audit[3066]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd29e3200 a2=0 a3=1 items=0 ppid=2954 pid=3066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.215000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Apr 12 18:22:20.223000 audit[3069]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3069 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.223000 audit[3069]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe4e01180 a2=0 a3=1 items=0 ppid=2954 pid=3069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.223000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Apr 12 18:22:20.230000 audit[3072]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3072 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.230000 audit[3072]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe51a37a0 a2=0 a3=1 items=0 ppid=2954 pid=3072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.230000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Apr 12 18:22:20.232000 audit[3073]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3073 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.232000 audit[3073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd0695430 a2=0 a3=1 items=0 ppid=2954 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.232000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Apr 12 18:22:20.237000 audit[3075]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3075 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.237000 audit[3075]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffc81a0d70 a2=0 a3=1 items=0 ppid=2954 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.237000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Apr 12 18:22:20.246000 audit[3078]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3078 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.246000 audit[3078]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffff25fd400 a2=0 a3=1 items=0 ppid=2954 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.246000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Apr 12 18:22:20.249000 audit[3079]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=3079 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.249000 audit[3079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffe26caf0 a2=0 a3=1 items=0 ppid=2954 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.249000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Apr 12 18:22:20.254000 audit[3081]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=3081 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.254000 audit[3081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc5ab0e70 a2=0 a3=1 items=0 ppid=2954 pid=3081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.254000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Apr 12 18:22:20.261000 audit[3084]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=3084 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.261000 audit[3084]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe95678f0 a2=0 a3=1 items=0 ppid=2954 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.261000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Apr 12 18:22:20.263000 audit[3085]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=3085 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.263000 audit[3085]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe02b6260 a2=0 a3=1 items=0 ppid=2954 pid=3085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.263000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Apr 12 18:22:20.268000 audit[3087]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=3087 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:22:20.268000 audit[3087]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc6e0a540 a2=0 a3=1 items=0 ppid=2954 pid=3087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.268000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Apr 12 18:22:20.274000 audit[3089]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3089 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Apr 12 18:22:20.274000 audit[3089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2004 a0=3 a1=ffffecabd430 a2=0 a3=1 items=0 ppid=2954 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.274000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:20.275000 audit[3089]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3089 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Apr 12 18:22:20.275000 audit[3089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffecabd430 a2=0 a3=1 items=0 ppid=2954 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.275000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:20.447868 env[1688]: time="2024-04-12T18:22:20.447719962Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-786dc9d695-p42mx,Uid:8e11f567-b415-4a54-b096-0a080a7f77e3,Namespace:tigera-operator,Attempt:0,}" Apr 12 18:22:20.483149 env[1688]: time="2024-04-12T18:22:20.483019492Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:22:20.483421 env[1688]: time="2024-04-12T18:22:20.483353395Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:22:20.483657 env[1688]: time="2024-04-12T18:22:20.483601063Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:22:20.484308 env[1688]: time="2024-04-12T18:22:20.484128140Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f9bd66f1d8f07552e91fc0d0299a7dae92535e0911adfac5ab12b357bdc90f53 pid=3097 runtime=io.containerd.runc.v2 Apr 12 18:22:20.523240 systemd[1]: Started cri-containerd-f9bd66f1d8f07552e91fc0d0299a7dae92535e0911adfac5ab12b357bdc90f53.scope. Apr 12 18:22:20.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.548000 audit: BPF prog-id=122 op=LOAD Apr 12 18:22:20.549000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.549000 audit[3109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3097 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639626436366631643866303735353265393166633064303239396137 Apr 12 18:22:20.549000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.549000 audit[3109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3097 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639626436366631643866303735353265393166633064303239396137 Apr 12 18:22:20.550000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.550000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.550000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.550000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.550000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.550000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.550000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.550000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.550000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.550000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.550000 audit: BPF prog-id=123 op=LOAD Apr 12 18:22:20.550000 audit[3109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3097 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639626436366631643866303735353265393166633064303239396137 Apr 12 18:22:20.552000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.552000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.552000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.552000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.552000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.552000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.552000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.552000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.552000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.552000 audit: BPF prog-id=124 op=LOAD Apr 12 18:22:20.552000 audit[3109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3097 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639626436366631643866303735353265393166633064303239396137 Apr 12 18:22:20.555000 audit: BPF prog-id=124 op=UNLOAD Apr 12 18:22:20.555000 audit: BPF prog-id=123 op=UNLOAD Apr 12 18:22:20.555000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.555000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.555000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.555000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.555000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.555000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.555000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.555000 audit[3109]: AVC avc: denied { perfmon } for pid=3109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.555000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.555000 audit[3109]: AVC avc: denied { bpf } for pid=3109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:20.555000 audit: BPF prog-id=125 op=LOAD Apr 12 18:22:20.555000 audit[3109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3097 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:20.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639626436366631643866303735353265393166633064303239396137 Apr 12 18:22:20.596263 env[1688]: time="2024-04-12T18:22:20.596207246Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-786dc9d695-p42mx,Uid:8e11f567-b415-4a54-b096-0a080a7f77e3,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"f9bd66f1d8f07552e91fc0d0299a7dae92535e0911adfac5ab12b357bdc90f53\"" Apr 12 18:22:20.600927 env[1688]: time="2024-04-12T18:22:20.600832875Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.7\"" Apr 12 18:22:21.950298 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2668589079.mount: Deactivated successfully. Apr 12 18:22:23.074830 env[1688]: time="2024-04-12T18:22:23.074754300Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.32.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:23.083578 env[1688]: time="2024-04-12T18:22:23.083453050Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c578d84ef425d69b1e535774752639ac2b078100e7525b71469799615b2d2aa0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:23.089070 env[1688]: time="2024-04-12T18:22:23.089009839Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.32.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:23.095291 env[1688]: time="2024-04-12T18:22:23.095211571Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.7\" returns image reference \"sha256:c578d84ef425d69b1e535774752639ac2b078100e7525b71469799615b2d2aa0\"" Apr 12 18:22:23.101958 env[1688]: time="2024-04-12T18:22:23.101903020Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:cc11f43967358b5c5eccfc5da449498c6d80bb0d4831feb5b7904c7b1ca905bd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:23.103694 env[1688]: time="2024-04-12T18:22:23.103628970Z" level=info msg="CreateContainer within sandbox \"f9bd66f1d8f07552e91fc0d0299a7dae92535e0911adfac5ab12b357bdc90f53\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Apr 12 18:22:23.123374 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount775654695.mount: Deactivated successfully. Apr 12 18:22:23.134546 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount685027844.mount: Deactivated successfully. Apr 12 18:22:23.167760 env[1688]: time="2024-04-12T18:22:23.167682358Z" level=info msg="CreateContainer within sandbox \"f9bd66f1d8f07552e91fc0d0299a7dae92535e0911adfac5ab12b357bdc90f53\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"6a1b02d7d75e6c3c283b0174ab8cd7db4af13624ea6b83bce97db0095f09b0a2\"" Apr 12 18:22:23.169243 env[1688]: time="2024-04-12T18:22:23.169172630Z" level=info msg="StartContainer for \"6a1b02d7d75e6c3c283b0174ab8cd7db4af13624ea6b83bce97db0095f09b0a2\"" Apr 12 18:22:23.206314 systemd[1]: Started cri-containerd-6a1b02d7d75e6c3c283b0174ab8cd7db4af13624ea6b83bce97db0095f09b0a2.scope. Apr 12 18:22:23.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.240000 audit: BPF prog-id=126 op=LOAD Apr 12 18:22:23.241000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.241000 audit[3143]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3097 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:23.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661316230326437643735653663336332383362303137346162386364 Apr 12 18:22:23.241000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.241000 audit[3143]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3097 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:23.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661316230326437643735653663336332383362303137346162386364 Apr 12 18:22:23.241000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.241000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.241000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.241000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.241000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.241000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.241000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.241000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.241000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.241000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.241000 audit: BPF prog-id=127 op=LOAD Apr 12 18:22:23.241000 audit[3143]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3097 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:23.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661316230326437643735653663336332383362303137346162386364 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit: BPF prog-id=128 op=LOAD Apr 12 18:22:23.242000 audit[3143]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3097 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:23.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661316230326437643735653663336332383362303137346162386364 Apr 12 18:22:23.242000 audit: BPF prog-id=128 op=UNLOAD Apr 12 18:22:23.242000 audit: BPF prog-id=127 op=UNLOAD Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:23.242000 audit: BPF prog-id=129 op=LOAD Apr 12 18:22:23.242000 audit[3143]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3097 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:23.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661316230326437643735653663336332383362303137346162386364 Apr 12 18:22:23.305251 env[1688]: time="2024-04-12T18:22:23.305184864Z" level=info msg="StartContainer for \"6a1b02d7d75e6c3c283b0174ab8cd7db4af13624ea6b83bce97db0095f09b0a2\" returns successfully" Apr 12 18:22:23.757402 kubelet[2815]: I0412 18:22:23.757330 2815 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-nznrl" podStartSLOduration=4.757253769 podCreationTimestamp="2024-04-12 18:22:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:22:20.744077306 +0000 UTC m=+14.479683156" watchObservedRunningTime="2024-04-12 18:22:23.757253769 +0000 UTC m=+17.492859595" Apr 12 18:22:26.685274 kubelet[2815]: I0412 18:22:26.685219 2815 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-786dc9d695-p42mx" podStartSLOduration=5.187648353 podCreationTimestamp="2024-04-12 18:22:19 +0000 UTC" firstStartedPulling="2024-04-12 18:22:20.598358059 +0000 UTC m=+14.333963873" lastFinishedPulling="2024-04-12 18:22:23.095874239 +0000 UTC m=+16.831480053" observedRunningTime="2024-04-12 18:22:23.765614837 +0000 UTC m=+17.501220687" watchObservedRunningTime="2024-04-12 18:22:26.685164533 +0000 UTC m=+20.420770347" Apr 12 18:22:27.498000 audit[3175]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3175 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:27.502677 kernel: kauditd_printk_skb: 357 callbacks suppressed Apr 12 18:22:27.502768 kernel: audit: type=1325 audit(1712946147.498:1092): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3175 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:27.498000 audit[3175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffdf8f8a50 a2=0 a3=1 items=0 ppid=2954 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:27.521972 kernel: audit: type=1300 audit(1712946147.498:1092): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffdf8f8a50 a2=0 a3=1 items=0 ppid=2954 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:27.522114 kernel: audit: type=1327 audit(1712946147.498:1092): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:27.498000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:27.519000 audit[3175]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3175 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:27.519000 audit[3175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdf8f8a50 a2=0 a3=1 items=0 ppid=2954 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:27.545261 kernel: audit: type=1325 audit(1712946147.519:1093): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3175 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:27.545439 kernel: audit: type=1300 audit(1712946147.519:1093): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdf8f8a50 a2=0 a3=1 items=0 ppid=2954 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:27.519000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:27.552980 kernel: audit: type=1327 audit(1712946147.519:1093): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:27.552000 audit[3177]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3177 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:27.552000 audit[3177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffffb45bf80 a2=0 a3=1 items=0 ppid=2954 pid=3177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:27.570964 kernel: audit: type=1325 audit(1712946147.552:1094): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3177 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:27.571113 kernel: audit: type=1300 audit(1712946147.552:1094): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffffb45bf80 a2=0 a3=1 items=0 ppid=2954 pid=3177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:27.571180 kernel: audit: type=1327 audit(1712946147.552:1094): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:27.552000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:27.552000 audit[3177]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3177 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:27.582255 kernel: audit: type=1325 audit(1712946147.552:1095): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3177 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:27.552000 audit[3177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffb45bf80 a2=0 a3=1 items=0 ppid=2954 pid=3177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:27.552000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:27.686754 kubelet[2815]: I0412 18:22:27.686684 2815 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:22:27.699055 systemd[1]: Created slice kubepods-besteffort-pod9df6f70b_fb12_429b_9ee5_e4223c0659bd.slice. Apr 12 18:22:27.711001 kubelet[2815]: W0412 18:22:27.710948 2815 reflector.go:533] object-"calico-system"/"tigera-ca-bundle": failed to list *v1.ConfigMap: configmaps "tigera-ca-bundle" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:22:27.711794 kubelet[2815]: E0412 18:22:27.711732 2815 reflector.go:148] object-"calico-system"/"tigera-ca-bundle": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "tigera-ca-bundle" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:22:27.712366 kubelet[2815]: W0412 18:22:27.712332 2815 reflector.go:533] object-"calico-system"/"typha-certs": failed to list *v1.Secret: secrets "typha-certs" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:22:27.712619 kubelet[2815]: E0412 18:22:27.712583 2815 reflector.go:148] object-"calico-system"/"typha-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "typha-certs" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:22:27.712887 kubelet[2815]: W0412 18:22:27.712819 2815 reflector.go:533] object-"calico-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:22:27.713075 kubelet[2815]: E0412 18:22:27.713053 2815 reflector.go:148] object-"calico-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:22:27.763985 kubelet[2815]: I0412 18:22:27.763834 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/9df6f70b-fb12-429b-9ee5-e4223c0659bd-typha-certs\") pod \"calico-typha-5df7d7b56b-tgf67\" (UID: \"9df6f70b-fb12-429b-9ee5-e4223c0659bd\") " pod="calico-system/calico-typha-5df7d7b56b-tgf67" Apr 12 18:22:27.764299 kubelet[2815]: I0412 18:22:27.764267 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9df6f70b-fb12-429b-9ee5-e4223c0659bd-tigera-ca-bundle\") pod \"calico-typha-5df7d7b56b-tgf67\" (UID: \"9df6f70b-fb12-429b-9ee5-e4223c0659bd\") " pod="calico-system/calico-typha-5df7d7b56b-tgf67" Apr 12 18:22:27.764478 kubelet[2815]: I0412 18:22:27.764445 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-g7gps\" (UniqueName: \"kubernetes.io/projected/9df6f70b-fb12-429b-9ee5-e4223c0659bd-kube-api-access-g7gps\") pod \"calico-typha-5df7d7b56b-tgf67\" (UID: \"9df6f70b-fb12-429b-9ee5-e4223c0659bd\") " pod="calico-system/calico-typha-5df7d7b56b-tgf67" Apr 12 18:22:27.911413 kubelet[2815]: I0412 18:22:27.911355 2815 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:22:27.923308 systemd[1]: Created slice kubepods-besteffort-pod127213c6_c03b_4492_8fbc_e9e458e6c633.slice. Apr 12 18:22:27.966851 kubelet[2815]: I0412 18:22:27.966802 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/127213c6-c03b-4492-8fbc-e9e458e6c633-lib-modules\") pod \"calico-node-v6sv8\" (UID: \"127213c6-c03b-4492-8fbc-e9e458e6c633\") " pod="calico-system/calico-node-v6sv8" Apr 12 18:22:27.967163 kubelet[2815]: I0412 18:22:27.967114 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/127213c6-c03b-4492-8fbc-e9e458e6c633-var-run-calico\") pod \"calico-node-v6sv8\" (UID: \"127213c6-c03b-4492-8fbc-e9e458e6c633\") " pod="calico-system/calico-node-v6sv8" Apr 12 18:22:27.967403 kubelet[2815]: I0412 18:22:27.967360 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6668v\" (UniqueName: \"kubernetes.io/projected/127213c6-c03b-4492-8fbc-e9e458e6c633-kube-api-access-6668v\") pod \"calico-node-v6sv8\" (UID: \"127213c6-c03b-4492-8fbc-e9e458e6c633\") " pod="calico-system/calico-node-v6sv8" Apr 12 18:22:27.967654 kubelet[2815]: I0412 18:22:27.967612 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/127213c6-c03b-4492-8fbc-e9e458e6c633-xtables-lock\") pod \"calico-node-v6sv8\" (UID: \"127213c6-c03b-4492-8fbc-e9e458e6c633\") " pod="calico-system/calico-node-v6sv8" Apr 12 18:22:27.967869 kubelet[2815]: I0412 18:22:27.967829 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/127213c6-c03b-4492-8fbc-e9e458e6c633-cni-net-dir\") pod \"calico-node-v6sv8\" (UID: \"127213c6-c03b-4492-8fbc-e9e458e6c633\") " pod="calico-system/calico-node-v6sv8" Apr 12 18:22:27.968074 kubelet[2815]: I0412 18:22:27.968034 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/127213c6-c03b-4492-8fbc-e9e458e6c633-cni-log-dir\") pod \"calico-node-v6sv8\" (UID: \"127213c6-c03b-4492-8fbc-e9e458e6c633\") " pod="calico-system/calico-node-v6sv8" Apr 12 18:22:27.968303 kubelet[2815]: I0412 18:22:27.968282 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/127213c6-c03b-4492-8fbc-e9e458e6c633-tigera-ca-bundle\") pod \"calico-node-v6sv8\" (UID: \"127213c6-c03b-4492-8fbc-e9e458e6c633\") " pod="calico-system/calico-node-v6sv8" Apr 12 18:22:27.968561 kubelet[2815]: I0412 18:22:27.968539 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/127213c6-c03b-4492-8fbc-e9e458e6c633-node-certs\") pod \"calico-node-v6sv8\" (UID: \"127213c6-c03b-4492-8fbc-e9e458e6c633\") " pod="calico-system/calico-node-v6sv8" Apr 12 18:22:27.968785 kubelet[2815]: I0412 18:22:27.968731 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/127213c6-c03b-4492-8fbc-e9e458e6c633-policysync\") pod \"calico-node-v6sv8\" (UID: \"127213c6-c03b-4492-8fbc-e9e458e6c633\") " pod="calico-system/calico-node-v6sv8" Apr 12 18:22:27.968991 kubelet[2815]: I0412 18:22:27.968952 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/127213c6-c03b-4492-8fbc-e9e458e6c633-flexvol-driver-host\") pod \"calico-node-v6sv8\" (UID: \"127213c6-c03b-4492-8fbc-e9e458e6c633\") " pod="calico-system/calico-node-v6sv8" Apr 12 18:22:27.969198 kubelet[2815]: I0412 18:22:27.969164 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/127213c6-c03b-4492-8fbc-e9e458e6c633-var-lib-calico\") pod \"calico-node-v6sv8\" (UID: \"127213c6-c03b-4492-8fbc-e9e458e6c633\") " pod="calico-system/calico-node-v6sv8" Apr 12 18:22:27.969375 kubelet[2815]: I0412 18:22:27.969353 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/127213c6-c03b-4492-8fbc-e9e458e6c633-cni-bin-dir\") pod \"calico-node-v6sv8\" (UID: \"127213c6-c03b-4492-8fbc-e9e458e6c633\") " pod="calico-system/calico-node-v6sv8" Apr 12 18:22:28.088720 kubelet[2815]: E0412 18:22:28.088676 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.088986 kubelet[2815]: W0412 18:22:28.088950 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.089130 kubelet[2815]: E0412 18:22:28.089106 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.115265 kubelet[2815]: I0412 18:22:28.115200 2815 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:22:28.116402 kubelet[2815]: E0412 18:22:28.115960 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hb8c9" podUID=8c4bfb8a-7c26-460b-af4b-5242640fa2d2 Apr 12 18:22:28.135680 kubelet[2815]: E0412 18:22:28.135643 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.135878 kubelet[2815]: W0412 18:22:28.135848 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.136029 kubelet[2815]: E0412 18:22:28.136006 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.136543 kubelet[2815]: E0412 18:22:28.136492 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.136728 kubelet[2815]: W0412 18:22:28.136700 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.136889 kubelet[2815]: E0412 18:22:28.136867 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.137347 kubelet[2815]: E0412 18:22:28.137322 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.137488 kubelet[2815]: W0412 18:22:28.137462 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.137629 kubelet[2815]: E0412 18:22:28.137608 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.138437 kubelet[2815]: E0412 18:22:28.138404 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.138632 kubelet[2815]: W0412 18:22:28.138604 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.138789 kubelet[2815]: E0412 18:22:28.138768 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.141703 kubelet[2815]: E0412 18:22:28.141662 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.141944 kubelet[2815]: W0412 18:22:28.141914 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.142075 kubelet[2815]: E0412 18:22:28.142053 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.142686 kubelet[2815]: E0412 18:22:28.142638 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.142890 kubelet[2815]: W0412 18:22:28.142861 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.143031 kubelet[2815]: E0412 18:22:28.143010 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.144370 kubelet[2815]: E0412 18:22:28.144333 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.144677 kubelet[2815]: W0412 18:22:28.144645 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.144891 kubelet[2815]: E0412 18:22:28.144867 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.145567 kubelet[2815]: E0412 18:22:28.145499 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.145769 kubelet[2815]: W0412 18:22:28.145739 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.145918 kubelet[2815]: E0412 18:22:28.145895 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.146460 kubelet[2815]: E0412 18:22:28.146431 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.146725 kubelet[2815]: W0412 18:22:28.146695 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.146885 kubelet[2815]: E0412 18:22:28.146863 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.147441 kubelet[2815]: E0412 18:22:28.147413 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.147671 kubelet[2815]: W0412 18:22:28.147641 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.147822 kubelet[2815]: E0412 18:22:28.147798 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.153657 kubelet[2815]: E0412 18:22:28.153621 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.153879 kubelet[2815]: W0412 18:22:28.153851 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.154090 kubelet[2815]: E0412 18:22:28.154066 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.154701 kubelet[2815]: E0412 18:22:28.154672 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.154877 kubelet[2815]: W0412 18:22:28.154850 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.155014 kubelet[2815]: E0412 18:22:28.154993 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.155593 kubelet[2815]: E0412 18:22:28.155568 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.155756 kubelet[2815]: W0412 18:22:28.155732 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.155873 kubelet[2815]: E0412 18:22:28.155853 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.158666 kubelet[2815]: E0412 18:22:28.158630 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.158867 kubelet[2815]: W0412 18:22:28.158837 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.159030 kubelet[2815]: E0412 18:22:28.159008 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.159584 kubelet[2815]: E0412 18:22:28.159494 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.159769 kubelet[2815]: W0412 18:22:28.159740 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.159909 kubelet[2815]: E0412 18:22:28.159886 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.171694 kubelet[2815]: E0412 18:22:28.171646 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.171694 kubelet[2815]: W0412 18:22:28.171682 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.171956 kubelet[2815]: E0412 18:22:28.171737 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.172119 kubelet[2815]: E0412 18:22:28.172085 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.172119 kubelet[2815]: W0412 18:22:28.172112 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.172261 kubelet[2815]: E0412 18:22:28.172141 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.172261 kubelet[2815]: I0412 18:22:28.172189 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/8c4bfb8a-7c26-460b-af4b-5242640fa2d2-varrun\") pod \"csi-node-driver-hb8c9\" (UID: \"8c4bfb8a-7c26-460b-af4b-5242640fa2d2\") " pod="calico-system/csi-node-driver-hb8c9" Apr 12 18:22:28.172723 kubelet[2815]: E0412 18:22:28.172679 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.172723 kubelet[2815]: W0412 18:22:28.172713 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.172937 kubelet[2815]: E0412 18:22:28.172773 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.173283 kubelet[2815]: E0412 18:22:28.173245 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.173283 kubelet[2815]: W0412 18:22:28.173278 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.173447 kubelet[2815]: E0412 18:22:28.173311 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.174821 kubelet[2815]: E0412 18:22:28.174786 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.175116 kubelet[2815]: W0412 18:22:28.175088 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.175275 kubelet[2815]: E0412 18:22:28.175219 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.175890 kubelet[2815]: E0412 18:22:28.175862 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.176063 kubelet[2815]: W0412 18:22:28.176035 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.176188 kubelet[2815]: E0412 18:22:28.176166 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.176891 kubelet[2815]: E0412 18:22:28.176859 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.177124 kubelet[2815]: W0412 18:22:28.177095 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.177257 kubelet[2815]: E0412 18:22:28.177234 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.177470 kubelet[2815]: I0412 18:22:28.177400 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/8c4bfb8a-7c26-460b-af4b-5242640fa2d2-socket-dir\") pod \"csi-node-driver-hb8c9\" (UID: \"8c4bfb8a-7c26-460b-af4b-5242640fa2d2\") " pod="calico-system/csi-node-driver-hb8c9" Apr 12 18:22:28.177993 kubelet[2815]: E0412 18:22:28.177927 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.177993 kubelet[2815]: W0412 18:22:28.177961 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.177993 kubelet[2815]: E0412 18:22:28.177999 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.178587 kubelet[2815]: E0412 18:22:28.178545 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.178587 kubelet[2815]: W0412 18:22:28.178577 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.178760 kubelet[2815]: E0412 18:22:28.178612 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.179027 kubelet[2815]: E0412 18:22:28.178990 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.179027 kubelet[2815]: W0412 18:22:28.179021 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.179175 kubelet[2815]: E0412 18:22:28.179051 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.179175 kubelet[2815]: I0412 18:22:28.179105 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/8c4bfb8a-7c26-460b-af4b-5242640fa2d2-kubelet-dir\") pod \"csi-node-driver-hb8c9\" (UID: \"8c4bfb8a-7c26-460b-af4b-5242640fa2d2\") " pod="calico-system/csi-node-driver-hb8c9" Apr 12 18:22:28.179688 kubelet[2815]: E0412 18:22:28.179647 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.179688 kubelet[2815]: W0412 18:22:28.179679 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.179882 kubelet[2815]: E0412 18:22:28.179726 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.179882 kubelet[2815]: I0412 18:22:28.179775 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tmvdv\" (UniqueName: \"kubernetes.io/projected/8c4bfb8a-7c26-460b-af4b-5242640fa2d2-kube-api-access-tmvdv\") pod \"csi-node-driver-hb8c9\" (UID: \"8c4bfb8a-7c26-460b-af4b-5242640fa2d2\") " pod="calico-system/csi-node-driver-hb8c9" Apr 12 18:22:28.180324 kubelet[2815]: E0412 18:22:28.180089 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.180324 kubelet[2815]: W0412 18:22:28.180116 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.180324 kubelet[2815]: E0412 18:22:28.180147 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.181717 kubelet[2815]: E0412 18:22:28.181664 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.181717 kubelet[2815]: W0412 18:22:28.181701 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.181974 kubelet[2815]: E0412 18:22:28.181741 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.182186 kubelet[2815]: E0412 18:22:28.182149 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.182186 kubelet[2815]: W0412 18:22:28.182177 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.182320 kubelet[2815]: E0412 18:22:28.182206 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.182837 kubelet[2815]: E0412 18:22:28.182807 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.183031 kubelet[2815]: W0412 18:22:28.183003 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.183169 kubelet[2815]: E0412 18:22:28.183145 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.183782 kubelet[2815]: E0412 18:22:28.183753 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.183983 kubelet[2815]: W0412 18:22:28.183954 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.185892 kubelet[2815]: E0412 18:22:28.185838 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.186667 kubelet[2815]: E0412 18:22:28.186634 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.186850 kubelet[2815]: W0412 18:22:28.186822 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.187006 kubelet[2815]: E0412 18:22:28.186983 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.187177 kubelet[2815]: I0412 18:22:28.187151 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/8c4bfb8a-7c26-460b-af4b-5242640fa2d2-registration-dir\") pod \"csi-node-driver-hb8c9\" (UID: \"8c4bfb8a-7c26-460b-af4b-5242640fa2d2\") " pod="calico-system/csi-node-driver-hb8c9" Apr 12 18:22:28.187781 kubelet[2815]: E0412 18:22:28.187750 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.187970 kubelet[2815]: W0412 18:22:28.187941 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.188103 kubelet[2815]: E0412 18:22:28.188080 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.188636 kubelet[2815]: E0412 18:22:28.188611 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.188829 kubelet[2815]: W0412 18:22:28.188801 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.188982 kubelet[2815]: E0412 18:22:28.188961 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.191724 kubelet[2815]: E0412 18:22:28.191686 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.191996 kubelet[2815]: W0412 18:22:28.191964 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.192244 kubelet[2815]: E0412 18:22:28.192216 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.293744 kubelet[2815]: E0412 18:22:28.293710 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.293962 kubelet[2815]: W0412 18:22:28.293935 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.294101 kubelet[2815]: E0412 18:22:28.294078 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.294628 kubelet[2815]: E0412 18:22:28.294602 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.294787 kubelet[2815]: W0412 18:22:28.294761 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.294904 kubelet[2815]: E0412 18:22:28.294884 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.295481 kubelet[2815]: E0412 18:22:28.295454 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.295780 kubelet[2815]: W0412 18:22:28.295702 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.295933 kubelet[2815]: E0412 18:22:28.295911 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.296394 kubelet[2815]: E0412 18:22:28.296354 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.296394 kubelet[2815]: W0412 18:22:28.296386 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.296666 kubelet[2815]: E0412 18:22:28.296432 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.297103 kubelet[2815]: E0412 18:22:28.297066 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.297103 kubelet[2815]: W0412 18:22:28.297097 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.297363 kubelet[2815]: E0412 18:22:28.297339 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.297497 kubelet[2815]: E0412 18:22:28.297413 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.297686 kubelet[2815]: W0412 18:22:28.297658 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.297892 kubelet[2815]: E0412 18:22:28.297854 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.298438 kubelet[2815]: E0412 18:22:28.298405 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.298737 kubelet[2815]: W0412 18:22:28.298704 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.298954 kubelet[2815]: E0412 18:22:28.298918 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.299405 kubelet[2815]: E0412 18:22:28.299379 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.299609 kubelet[2815]: W0412 18:22:28.299583 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.299782 kubelet[2815]: E0412 18:22:28.299748 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.300192 kubelet[2815]: E0412 18:22:28.300170 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.300339 kubelet[2815]: W0412 18:22:28.300313 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.300577 kubelet[2815]: E0412 18:22:28.300531 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.302943 kubelet[2815]: E0412 18:22:28.302907 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.303198 kubelet[2815]: W0412 18:22:28.303170 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.303427 kubelet[2815]: E0412 18:22:28.303391 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.304039 kubelet[2815]: E0412 18:22:28.304013 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.304196 kubelet[2815]: W0412 18:22:28.304169 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.304404 kubelet[2815]: E0412 18:22:28.304368 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.304876 kubelet[2815]: E0412 18:22:28.304851 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.305063 kubelet[2815]: W0412 18:22:28.305034 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.305266 kubelet[2815]: E0412 18:22:28.305231 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.307813 kubelet[2815]: E0412 18:22:28.307779 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.308050 kubelet[2815]: W0412 18:22:28.308021 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.308207 kubelet[2815]: E0412 18:22:28.308183 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.308643 kubelet[2815]: E0412 18:22:28.308606 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.308643 kubelet[2815]: W0412 18:22:28.308635 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.308903 kubelet[2815]: E0412 18:22:28.308878 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.309291 kubelet[2815]: E0412 18:22:28.309260 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.309291 kubelet[2815]: W0412 18:22:28.309285 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.309574 kubelet[2815]: E0412 18:22:28.309550 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.309751 kubelet[2815]: E0412 18:22:28.309631 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.309868 kubelet[2815]: W0412 18:22:28.309845 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.310019 kubelet[2815]: E0412 18:22:28.309987 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.310419 kubelet[2815]: E0412 18:22:28.310396 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.310572 kubelet[2815]: W0412 18:22:28.310548 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.310766 kubelet[2815]: E0412 18:22:28.310720 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.311215 kubelet[2815]: E0412 18:22:28.311192 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.311350 kubelet[2815]: W0412 18:22:28.311326 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.311578 kubelet[2815]: E0412 18:22:28.311473 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.311999 kubelet[2815]: E0412 18:22:28.311976 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.312207 kubelet[2815]: W0412 18:22:28.312182 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.312375 kubelet[2815]: E0412 18:22:28.312341 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.313840 kubelet[2815]: E0412 18:22:28.313794 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.314030 kubelet[2815]: W0412 18:22:28.314002 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.314218 kubelet[2815]: E0412 18:22:28.314183 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.315667 kubelet[2815]: E0412 18:22:28.315636 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.315871 kubelet[2815]: W0412 18:22:28.315844 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.316023 kubelet[2815]: E0412 18:22:28.316001 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.316358 kubelet[2815]: E0412 18:22:28.316315 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.316358 kubelet[2815]: W0412 18:22:28.316346 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.316577 kubelet[2815]: E0412 18:22:28.316387 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.317161 kubelet[2815]: E0412 18:22:28.317110 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.317161 kubelet[2815]: W0412 18:22:28.317142 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.317441 kubelet[2815]: E0412 18:22:28.317416 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.317631 kubelet[2815]: E0412 18:22:28.317472 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.317631 kubelet[2815]: W0412 18:22:28.317627 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.317766 kubelet[2815]: E0412 18:22:28.317657 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.318020 kubelet[2815]: E0412 18:22:28.317986 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.318020 kubelet[2815]: W0412 18:22:28.318013 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.318209 kubelet[2815]: E0412 18:22:28.318041 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.318450 kubelet[2815]: E0412 18:22:28.318415 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.318450 kubelet[2815]: W0412 18:22:28.318442 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.318618 kubelet[2815]: E0412 18:22:28.318483 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.318871 kubelet[2815]: E0412 18:22:28.318839 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.318871 kubelet[2815]: W0412 18:22:28.318865 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.319032 kubelet[2815]: E0412 18:22:28.318892 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.319214 kubelet[2815]: E0412 18:22:28.319174 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.319214 kubelet[2815]: W0412 18:22:28.319200 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.319353 kubelet[2815]: E0412 18:22:28.319233 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.319598 kubelet[2815]: E0412 18:22:28.319561 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.319598 kubelet[2815]: W0412 18:22:28.319589 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.319749 kubelet[2815]: E0412 18:22:28.319616 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.319988 kubelet[2815]: E0412 18:22:28.319955 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.319988 kubelet[2815]: W0412 18:22:28.319981 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.320148 kubelet[2815]: E0412 18:22:28.320007 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.419617 kubelet[2815]: E0412 18:22:28.419475 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.419898 kubelet[2815]: W0412 18:22:28.419869 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.420079 kubelet[2815]: E0412 18:22:28.420057 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.421142 kubelet[2815]: E0412 18:22:28.421049 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.421523 kubelet[2815]: W0412 18:22:28.421483 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.421909 kubelet[2815]: E0412 18:22:28.421829 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.424996 kubelet[2815]: E0412 18:22:28.424966 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.425270 kubelet[2815]: W0412 18:22:28.425169 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.425535 kubelet[2815]: E0412 18:22:28.425495 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.426729 kubelet[2815]: E0412 18:22:28.426701 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.427125 kubelet[2815]: W0412 18:22:28.427036 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.427583 kubelet[2815]: E0412 18:22:28.427558 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.428643 kubelet[2815]: E0412 18:22:28.428611 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.428947 kubelet[2815]: W0412 18:22:28.428916 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.429125 kubelet[2815]: E0412 18:22:28.429103 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.431706 kubelet[2815]: E0412 18:22:28.430714 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.431706 kubelet[2815]: W0412 18:22:28.430752 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.431706 kubelet[2815]: E0412 18:22:28.430788 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.532270 kubelet[2815]: E0412 18:22:28.532213 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.532270 kubelet[2815]: W0412 18:22:28.532253 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.532553 kubelet[2815]: E0412 18:22:28.532289 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.532721 kubelet[2815]: E0412 18:22:28.532682 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.532721 kubelet[2815]: W0412 18:22:28.532712 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.532882 kubelet[2815]: E0412 18:22:28.532740 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.533214 kubelet[2815]: E0412 18:22:28.533169 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.533214 kubelet[2815]: W0412 18:22:28.533201 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.533364 kubelet[2815]: E0412 18:22:28.533230 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.533595 kubelet[2815]: E0412 18:22:28.533568 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.533671 kubelet[2815]: W0412 18:22:28.533594 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.533671 kubelet[2815]: E0412 18:22:28.533622 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.534039 kubelet[2815]: E0412 18:22:28.533995 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.534039 kubelet[2815]: W0412 18:22:28.534027 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.534260 kubelet[2815]: E0412 18:22:28.534055 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.534397 kubelet[2815]: E0412 18:22:28.534370 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.534473 kubelet[2815]: W0412 18:22:28.534395 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.534473 kubelet[2815]: E0412 18:22:28.534423 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.610139 kubelet[2815]: E0412 18:22:28.605474 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.610139 kubelet[2815]: W0412 18:22:28.605532 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.610139 kubelet[2815]: E0412 18:22:28.605571 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.610139 kubelet[2815]: E0412 18:22:28.609017 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.610139 kubelet[2815]: W0412 18:22:28.609041 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.610139 kubelet[2815]: E0412 18:22:28.609073 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.616714 kubelet[2815]: E0412 18:22:28.615111 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.616714 kubelet[2815]: W0412 18:22:28.615151 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.616714 kubelet[2815]: E0412 18:22:28.615192 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.617000 audit[3263]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=3263 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:28.617000 audit[3263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffc491ba70 a2=0 a3=1 items=0 ppid=2954 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:28.617000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:28.620000 audit[3263]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3263 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:28.620000 audit[3263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc491ba70 a2=0 a3=1 items=0 ppid=2954 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:28.620000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:28.635868 kubelet[2815]: E0412 18:22:28.635820 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.635868 kubelet[2815]: W0412 18:22:28.635855 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.636106 kubelet[2815]: E0412 18:22:28.635890 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.636305 kubelet[2815]: E0412 18:22:28.636277 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.636398 kubelet[2815]: W0412 18:22:28.636304 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.636398 kubelet[2815]: E0412 18:22:28.636332 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.636918 kubelet[2815]: E0412 18:22:28.636879 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.636918 kubelet[2815]: W0412 18:22:28.636910 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.637122 kubelet[2815]: E0412 18:22:28.636944 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.737992 kubelet[2815]: E0412 18:22:28.737860 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.738593 kubelet[2815]: W0412 18:22:28.738560 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.738721 kubelet[2815]: E0412 18:22:28.738699 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.740153 kubelet[2815]: E0412 18:22:28.740121 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.740356 kubelet[2815]: W0412 18:22:28.740329 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.740482 kubelet[2815]: E0412 18:22:28.740460 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.741058 kubelet[2815]: E0412 18:22:28.741034 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.741193 kubelet[2815]: W0412 18:22:28.741169 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.741311 kubelet[2815]: E0412 18:22:28.741290 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.842335 kubelet[2815]: E0412 18:22:28.842297 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.842603 kubelet[2815]: W0412 18:22:28.842575 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.842740 kubelet[2815]: E0412 18:22:28.842717 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.845270 kubelet[2815]: E0412 18:22:28.845229 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.845496 kubelet[2815]: W0412 18:22:28.845469 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.845683 kubelet[2815]: E0412 18:22:28.845659 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.846256 kubelet[2815]: E0412 18:22:28.846230 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.846416 kubelet[2815]: W0412 18:22:28.846390 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.846584 kubelet[2815]: E0412 18:22:28.846563 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.865928 kubelet[2815]: E0412 18:22:28.865883 2815 configmap.go:199] Couldn't get configMap calico-system/tigera-ca-bundle: failed to sync configmap cache: timed out waiting for the condition Apr 12 18:22:28.866214 kubelet[2815]: E0412 18:22:28.866192 2815 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/9df6f70b-fb12-429b-9ee5-e4223c0659bd-tigera-ca-bundle podName:9df6f70b-fb12-429b-9ee5-e4223c0659bd nodeName:}" failed. No retries permitted until 2024-04-12 18:22:29.366160192 +0000 UTC m=+23.101766006 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "tigera-ca-bundle" (UniqueName: "kubernetes.io/configmap/9df6f70b-fb12-429b-9ee5-e4223c0659bd-tigera-ca-bundle") pod "calico-typha-5df7d7b56b-tgf67" (UID: "9df6f70b-fb12-429b-9ee5-e4223c0659bd") : failed to sync configmap cache: timed out waiting for the condition Apr 12 18:22:28.866642 kubelet[2815]: E0412 18:22:28.866603 2815 secret.go:194] Couldn't get secret calico-system/typha-certs: failed to sync secret cache: timed out waiting for the condition Apr 12 18:22:28.866759 kubelet[2815]: E0412 18:22:28.866692 2815 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/9df6f70b-fb12-429b-9ee5-e4223c0659bd-typha-certs podName:9df6f70b-fb12-429b-9ee5-e4223c0659bd nodeName:}" failed. No retries permitted until 2024-04-12 18:22:29.366670907 +0000 UTC m=+23.102276721 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "typha-certs" (UniqueName: "kubernetes.io/secret/9df6f70b-fb12-429b-9ee5-e4223c0659bd-typha-certs") pod "calico-typha-5df7d7b56b-tgf67" (UID: "9df6f70b-fb12-429b-9ee5-e4223c0659bd") : failed to sync secret cache: timed out waiting for the condition Apr 12 18:22:28.947617 kubelet[2815]: E0412 18:22:28.947562 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.947617 kubelet[2815]: W0412 18:22:28.947601 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.947854 kubelet[2815]: E0412 18:22:28.947638 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.948016 kubelet[2815]: E0412 18:22:28.947976 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.948016 kubelet[2815]: W0412 18:22:28.948005 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.948157 kubelet[2815]: E0412 18:22:28.948034 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:28.948405 kubelet[2815]: E0412 18:22:28.948364 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:28.948405 kubelet[2815]: W0412 18:22:28.948394 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:28.948575 kubelet[2815]: E0412 18:22:28.948422 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.050075 kubelet[2815]: E0412 18:22:29.050012 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.050075 kubelet[2815]: W0412 18:22:29.050056 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.050292 kubelet[2815]: E0412 18:22:29.050093 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.050675 kubelet[2815]: E0412 18:22:29.050638 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.050675 kubelet[2815]: W0412 18:22:29.050668 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.050846 kubelet[2815]: E0412 18:22:29.050698 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.051094 kubelet[2815]: E0412 18:22:29.051055 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.051094 kubelet[2815]: W0412 18:22:29.051089 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.051237 kubelet[2815]: E0412 18:22:29.051120 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.070727 kubelet[2815]: E0412 18:22:29.070669 2815 configmap.go:199] Couldn't get configMap calico-system/tigera-ca-bundle: failed to sync configmap cache: timed out waiting for the condition Apr 12 18:22:29.070915 kubelet[2815]: E0412 18:22:29.070786 2815 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/127213c6-c03b-4492-8fbc-e9e458e6c633-tigera-ca-bundle podName:127213c6-c03b-4492-8fbc-e9e458e6c633 nodeName:}" failed. No retries permitted until 2024-04-12 18:22:29.570758465 +0000 UTC m=+23.306364279 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "tigera-ca-bundle" (UniqueName: "kubernetes.io/configmap/127213c6-c03b-4492-8fbc-e9e458e6c633-tigera-ca-bundle") pod "calico-node-v6sv8" (UID: "127213c6-c03b-4492-8fbc-e9e458e6c633") : failed to sync configmap cache: timed out waiting for the condition Apr 12 18:22:29.152071 kubelet[2815]: E0412 18:22:29.152034 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.152411 kubelet[2815]: W0412 18:22:29.152368 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.152592 kubelet[2815]: E0412 18:22:29.152568 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.153151 kubelet[2815]: E0412 18:22:29.153124 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.153328 kubelet[2815]: W0412 18:22:29.153302 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.153447 kubelet[2815]: E0412 18:22:29.153427 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.153968 kubelet[2815]: E0412 18:22:29.153944 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.154106 kubelet[2815]: W0412 18:22:29.154082 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.154224 kubelet[2815]: E0412 18:22:29.154203 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.255809 kubelet[2815]: E0412 18:22:29.255773 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.256077 kubelet[2815]: W0412 18:22:29.256050 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.256215 kubelet[2815]: E0412 18:22:29.256192 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.256721 kubelet[2815]: E0412 18:22:29.256698 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.256873 kubelet[2815]: W0412 18:22:29.256848 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.256991 kubelet[2815]: E0412 18:22:29.256970 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.257412 kubelet[2815]: E0412 18:22:29.257390 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.257593 kubelet[2815]: W0412 18:22:29.257567 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.257711 kubelet[2815]: E0412 18:22:29.257690 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.358984 kubelet[2815]: E0412 18:22:29.358869 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.359180 kubelet[2815]: W0412 18:22:29.359140 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.359313 kubelet[2815]: E0412 18:22:29.359291 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.360682 kubelet[2815]: E0412 18:22:29.360634 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.360682 kubelet[2815]: W0412 18:22:29.360672 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.360940 kubelet[2815]: E0412 18:22:29.360710 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.361153 kubelet[2815]: E0412 18:22:29.361117 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.361153 kubelet[2815]: W0412 18:22:29.361145 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.361296 kubelet[2815]: E0412 18:22:29.361174 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.462451 kubelet[2815]: E0412 18:22:29.462410 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.462451 kubelet[2815]: W0412 18:22:29.462445 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.462796 kubelet[2815]: E0412 18:22:29.462480 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.462925 kubelet[2815]: E0412 18:22:29.462890 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.462925 kubelet[2815]: W0412 18:22:29.462921 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.463049 kubelet[2815]: E0412 18:22:29.462956 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.463403 kubelet[2815]: E0412 18:22:29.463369 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.463403 kubelet[2815]: W0412 18:22:29.463396 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.463630 kubelet[2815]: E0412 18:22:29.463432 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.463839 kubelet[2815]: E0412 18:22:29.463806 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.463839 kubelet[2815]: W0412 18:22:29.463832 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.464004 kubelet[2815]: E0412 18:22:29.463870 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.464328 kubelet[2815]: E0412 18:22:29.464282 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.464328 kubelet[2815]: W0412 18:22:29.464308 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.464479 kubelet[2815]: E0412 18:22:29.464344 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.464736 kubelet[2815]: E0412 18:22:29.464702 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.464736 kubelet[2815]: W0412 18:22:29.464728 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.464927 kubelet[2815]: E0412 18:22:29.464896 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.465361 kubelet[2815]: E0412 18:22:29.465317 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.465361 kubelet[2815]: W0412 18:22:29.465345 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.465537 kubelet[2815]: E0412 18:22:29.465384 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.466003 kubelet[2815]: E0412 18:22:29.465783 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.466003 kubelet[2815]: W0412 18:22:29.465811 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.466003 kubelet[2815]: E0412 18:22:29.465853 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.466567 kubelet[2815]: E0412 18:22:29.466533 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.466567 kubelet[2815]: W0412 18:22:29.466561 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.466753 kubelet[2815]: E0412 18:22:29.466735 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.467711 kubelet[2815]: E0412 18:22:29.466983 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.467711 kubelet[2815]: W0412 18:22:29.467009 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.467711 kubelet[2815]: E0412 18:22:29.467046 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.468529 kubelet[2815]: E0412 18:22:29.468475 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.468529 kubelet[2815]: W0412 18:22:29.468542 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.468746 kubelet[2815]: E0412 18:22:29.468585 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.481445 kubelet[2815]: E0412 18:22:29.481339 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.481445 kubelet[2815]: W0412 18:22:29.481377 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.481445 kubelet[2815]: E0412 18:22:29.481427 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.482260 kubelet[2815]: E0412 18:22:29.481893 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.482260 kubelet[2815]: W0412 18:22:29.481936 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.482260 kubelet[2815]: E0412 18:22:29.481968 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.510022 env[1688]: time="2024-04-12T18:22:29.509358434Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5df7d7b56b-tgf67,Uid:9df6f70b-fb12-429b-9ee5-e4223c0659bd,Namespace:calico-system,Attempt:0,}" Apr 12 18:22:29.547965 env[1688]: time="2024-04-12T18:22:29.547848562Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:22:29.548228 env[1688]: time="2024-04-12T18:22:29.548177602Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:22:29.552706 env[1688]: time="2024-04-12T18:22:29.552593007Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:22:29.553194 env[1688]: time="2024-04-12T18:22:29.553113237Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3b2963f7cdf19b5e665e56cf1d447588d8a3e905b4ad7aada58044b664a70ba6 pid=3311 runtime=io.containerd.runc.v2 Apr 12 18:22:29.564865 kubelet[2815]: E0412 18:22:29.564807 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.564865 kubelet[2815]: W0412 18:22:29.564860 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.565121 kubelet[2815]: E0412 18:22:29.564897 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.603790 systemd[1]: Started cri-containerd-3b2963f7cdf19b5e665e56cf1d447588d8a3e905b4ad7aada58044b664a70ba6.scope. Apr 12 18:22:29.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.633000 audit: BPF prog-id=130 op=LOAD Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400019db38 a2=10 a3=0 items=0 ppid=3311 pid=3322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:29.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362323936336637636466313962356536363565353663663164343437 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=3311 pid=3322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:29.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362323936336637636466313962356536363565353663663164343437 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit: BPF prog-id=131 op=LOAD Apr 12 18:22:29.635000 audit[3322]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019d8e0 a2=78 a3=0 items=0 ppid=3311 pid=3322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:29.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362323936336637636466313962356536363565353663663164343437 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit: BPF prog-id=132 op=LOAD Apr 12 18:22:29.635000 audit[3322]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400019d670 a2=78 a3=0 items=0 ppid=3311 pid=3322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:29.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362323936336637636466313962356536363565353663663164343437 Apr 12 18:22:29.635000 audit: BPF prog-id=132 op=UNLOAD Apr 12 18:22:29.635000 audit: BPF prog-id=131 op=UNLOAD Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { perfmon } for pid=3322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit[3322]: AVC avc: denied { bpf } for pid=3322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.635000 audit: BPF prog-id=133 op=LOAD Apr 12 18:22:29.635000 audit[3322]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019db40 a2=78 a3=0 items=0 ppid=3311 pid=3322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:29.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362323936336637636466313962356536363565353663663164343437 Apr 12 18:22:29.663098 kubelet[2815]: E0412 18:22:29.662909 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hb8c9" podUID=8c4bfb8a-7c26-460b-af4b-5242640fa2d2 Apr 12 18:22:29.665834 kubelet[2815]: E0412 18:22:29.665781 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.665834 kubelet[2815]: W0412 18:22:29.665820 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.666068 kubelet[2815]: E0412 18:22:29.665856 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.666333 kubelet[2815]: E0412 18:22:29.666304 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.666414 kubelet[2815]: W0412 18:22:29.666334 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.666414 kubelet[2815]: E0412 18:22:29.666364 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.666761 kubelet[2815]: E0412 18:22:29.666733 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.666836 kubelet[2815]: W0412 18:22:29.666761 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.666836 kubelet[2815]: E0412 18:22:29.666790 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.667137 kubelet[2815]: E0412 18:22:29.667113 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.667137 kubelet[2815]: W0412 18:22:29.667132 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.667253 kubelet[2815]: E0412 18:22:29.667158 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.667672 kubelet[2815]: E0412 18:22:29.667549 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.667672 kubelet[2815]: W0412 18:22:29.667577 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.667672 kubelet[2815]: E0412 18:22:29.667611 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.669772 kubelet[2815]: E0412 18:22:29.669723 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:29.669922 kubelet[2815]: W0412 18:22:29.669782 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:29.669922 kubelet[2815]: E0412 18:22:29.669820 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:29.692924 env[1688]: time="2024-04-12T18:22:29.692862809Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5df7d7b56b-tgf67,Uid:9df6f70b-fb12-429b-9ee5-e4223c0659bd,Namespace:calico-system,Attempt:0,} returns sandbox id \"3b2963f7cdf19b5e665e56cf1d447588d8a3e905b4ad7aada58044b664a70ba6\"" Apr 12 18:22:29.696099 env[1688]: time="2024-04-12T18:22:29.696037548Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.3\"" Apr 12 18:22:29.733462 env[1688]: time="2024-04-12T18:22:29.733387911Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-v6sv8,Uid:127213c6-c03b-4492-8fbc-e9e458e6c633,Namespace:calico-system,Attempt:0,}" Apr 12 18:22:29.800920 env[1688]: time="2024-04-12T18:22:29.800223226Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:22:29.800920 env[1688]: time="2024-04-12T18:22:29.800299368Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:22:29.800920 env[1688]: time="2024-04-12T18:22:29.800325049Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:22:29.801748 env[1688]: time="2024-04-12T18:22:29.801519561Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f4404fc97068496e5c65d0e570b768b102c5949a34e2d062852c1bb9ec4b7ba0 pid=3358 runtime=io.containerd.runc.v2 Apr 12 18:22:29.841831 systemd[1]: Started cri-containerd-f4404fc97068496e5c65d0e570b768b102c5949a34e2d062852c1bb9ec4b7ba0.scope. Apr 12 18:22:29.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.890000 audit: BPF prog-id=134 op=LOAD Apr 12 18:22:29.890000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.890000 audit[3368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3358 pid=3368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:29.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634343034666339373036383439366535633635643065353730623736 Apr 12 18:22:29.890000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.890000 audit[3368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3358 pid=3368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:29.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634343034666339373036383439366535633635643065353730623736 Apr 12 18:22:29.893000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.893000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.893000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.893000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.893000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.893000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.893000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.893000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.893000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.893000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.893000 audit: BPF prog-id=135 op=LOAD Apr 12 18:22:29.893000 audit[3368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3358 pid=3368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:29.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634343034666339373036383439366535633635643065353730623736 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit: BPF prog-id=136 op=LOAD Apr 12 18:22:29.894000 audit[3368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3358 pid=3368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:29.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634343034666339373036383439366535633635643065353730623736 Apr 12 18:22:29.894000 audit: BPF prog-id=136 op=UNLOAD Apr 12 18:22:29.894000 audit: BPF prog-id=135 op=UNLOAD Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:29.894000 audit: BPF prog-id=137 op=LOAD Apr 12 18:22:29.894000 audit[3368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3358 pid=3368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:29.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634343034666339373036383439366535633635643065353730623736 Apr 12 18:22:29.933835 env[1688]: time="2024-04-12T18:22:29.933775459Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-v6sv8,Uid:127213c6-c03b-4492-8fbc-e9e458e6c633,Namespace:calico-system,Attempt:0,} returns sandbox id \"f4404fc97068496e5c65d0e570b768b102c5949a34e2d062852c1bb9ec4b7ba0\"" Apr 12 18:22:31.110120 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2030997895.mount: Deactivated successfully. Apr 12 18:22:31.663496 kubelet[2815]: E0412 18:22:31.663020 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hb8c9" podUID=8c4bfb8a-7c26-460b-af4b-5242640fa2d2 Apr 12 18:22:32.577088 env[1688]: time="2024-04-12T18:22:32.577034051Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:32.581590 env[1688]: time="2024-04-12T18:22:32.581536437Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a3fec2ec51dbbf4821da3fe949ec3b82082fa0a43548d22fd4af49bac4164545,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:32.584434 env[1688]: time="2024-04-12T18:22:32.584371413Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:32.587642 env[1688]: time="2024-04-12T18:22:32.587591831Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:418671dc5b90134cba7b93a914c8329e8ecafd45de67165aeee74252e5f14f3e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:32.588757 env[1688]: time="2024-04-12T18:22:32.588713137Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.3\" returns image reference \"sha256:a3fec2ec51dbbf4821da3fe949ec3b82082fa0a43548d22fd4af49bac4164545\"" Apr 12 18:22:32.605666 env[1688]: time="2024-04-12T18:22:32.604135234Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.3\"" Apr 12 18:22:32.627057 env[1688]: time="2024-04-12T18:22:32.626991429Z" level=info msg="CreateContainer within sandbox \"3b2963f7cdf19b5e665e56cf1d447588d8a3e905b4ad7aada58044b664a70ba6\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Apr 12 18:22:32.652902 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4138280544.mount: Deactivated successfully. Apr 12 18:22:32.668670 env[1688]: time="2024-04-12T18:22:32.666324940Z" level=info msg="CreateContainer within sandbox \"3b2963f7cdf19b5e665e56cf1d447588d8a3e905b4ad7aada58044b664a70ba6\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"fce2c6d4616eaf5a7f63724f72cbaec51450907f0940e93f2f36d127c48696ce\"" Apr 12 18:22:32.668670 env[1688]: time="2024-04-12T18:22:32.667441830Z" level=info msg="StartContainer for \"fce2c6d4616eaf5a7f63724f72cbaec51450907f0940e93f2f36d127c48696ce\"" Apr 12 18:22:32.724627 systemd[1]: Started cri-containerd-fce2c6d4616eaf5a7f63724f72cbaec51450907f0940e93f2f36d127c48696ce.scope. Apr 12 18:22:32.777916 kernel: kauditd_printk_skb: 122 callbacks suppressed Apr 12 18:22:32.778040 kernel: audit: type=1400 audit(1712946152.767:1134): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.785732 kernel: audit: type=1400 audit(1712946152.776:1135): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.796875 kernel: audit: type=1400 audit(1712946152.776:1136): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.796994 kernel: audit: type=1400 audit(1712946152.776:1137): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.813172 kernel: audit: type=1400 audit(1712946152.776:1138): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.822031 kernel: audit: type=1400 audit(1712946152.776:1139): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.833130 kernel: audit: type=1400 audit(1712946152.776:1140): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.841945 kernel: audit: type=1400 audit(1712946152.776:1141): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.852019 kernel: audit: type=1400 audit(1712946152.776:1142): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.859687 kernel: audit: type=1400 audit(1712946152.784:1143): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.784000 audit: BPF prog-id=138 op=LOAD Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3311 pid=3399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:32.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663653263366434363136656166356137663633373234663732636261 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3311 pid=3399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:32.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663653263366434363136656166356137663633373234663732636261 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit: BPF prog-id=139 op=LOAD Apr 12 18:22:32.786000 audit[3399]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3311 pid=3399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:32.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663653263366434363136656166356137663633373234663732636261 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit: BPF prog-id=140 op=LOAD Apr 12 18:22:32.786000 audit[3399]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3311 pid=3399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:32.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663653263366434363136656166356137663633373234663732636261 Apr 12 18:22:32.786000 audit: BPF prog-id=140 op=UNLOAD Apr 12 18:22:32.786000 audit: BPF prog-id=139 op=UNLOAD Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { perfmon } for pid=3399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit[3399]: AVC avc: denied { bpf } for pid=3399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:32.786000 audit: BPF prog-id=141 op=LOAD Apr 12 18:22:32.786000 audit[3399]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3311 pid=3399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:32.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663653263366434363136656166356137663633373234663732636261 Apr 12 18:22:32.915851 env[1688]: time="2024-04-12T18:22:32.915767931Z" level=info msg="StartContainer for \"fce2c6d4616eaf5a7f63724f72cbaec51450907f0940e93f2f36d127c48696ce\" returns successfully" Apr 12 18:22:33.663252 kubelet[2815]: E0412 18:22:33.663214 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hb8c9" podUID=8c4bfb8a-7c26-460b-af4b-5242640fa2d2 Apr 12 18:22:33.830057 kubelet[2815]: E0412 18:22:33.830019 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.830286 kubelet[2815]: W0412 18:22:33.830257 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.830452 kubelet[2815]: E0412 18:22:33.830430 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.831986 kubelet[2815]: E0412 18:22:33.831942 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.832178 kubelet[2815]: W0412 18:22:33.832151 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.832320 kubelet[2815]: E0412 18:22:33.832299 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.833182 kubelet[2815]: E0412 18:22:33.833154 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.833358 kubelet[2815]: W0412 18:22:33.833333 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.833496 kubelet[2815]: E0412 18:22:33.833476 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.834214 kubelet[2815]: E0412 18:22:33.834179 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.834357 kubelet[2815]: W0412 18:22:33.834333 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.834495 kubelet[2815]: E0412 18:22:33.834474 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.835069 kubelet[2815]: E0412 18:22:33.835037 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.835195 kubelet[2815]: W0412 18:22:33.835172 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.835329 kubelet[2815]: E0412 18:22:33.835309 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.837897 kubelet[2815]: E0412 18:22:33.837865 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.838096 kubelet[2815]: W0412 18:22:33.838070 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.838238 kubelet[2815]: E0412 18:22:33.838217 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.838993 kubelet[2815]: E0412 18:22:33.838967 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.839158 kubelet[2815]: W0412 18:22:33.839134 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.839296 kubelet[2815]: E0412 18:22:33.839276 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.840059 kubelet[2815]: E0412 18:22:33.840032 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.840255 kubelet[2815]: W0412 18:22:33.840229 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.840398 kubelet[2815]: E0412 18:22:33.840377 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.841152 kubelet[2815]: E0412 18:22:33.841126 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.841307 kubelet[2815]: W0412 18:22:33.841281 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.841439 kubelet[2815]: E0412 18:22:33.841418 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.841968 kubelet[2815]: E0412 18:22:33.841945 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.842099 kubelet[2815]: W0412 18:22:33.842076 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.842222 kubelet[2815]: E0412 18:22:33.842202 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.842682 kubelet[2815]: E0412 18:22:33.842661 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.842801 kubelet[2815]: W0412 18:22:33.842777 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.842932 kubelet[2815]: E0412 18:22:33.842912 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.843318 kubelet[2815]: E0412 18:22:33.843299 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.843431 kubelet[2815]: W0412 18:22:33.843409 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.843601 kubelet[2815]: E0412 18:22:33.843581 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.896857 kubelet[2815]: E0412 18:22:33.896820 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.896857 kubelet[2815]: W0412 18:22:33.896852 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.897090 kubelet[2815]: E0412 18:22:33.896888 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.897279 kubelet[2815]: E0412 18:22:33.897246 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.897279 kubelet[2815]: W0412 18:22:33.897272 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.897437 kubelet[2815]: E0412 18:22:33.897301 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.897722 kubelet[2815]: E0412 18:22:33.897693 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.897833 kubelet[2815]: W0412 18:22:33.897721 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.897833 kubelet[2815]: E0412 18:22:33.897762 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.898233 kubelet[2815]: E0412 18:22:33.898194 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.898233 kubelet[2815]: W0412 18:22:33.898221 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.898412 kubelet[2815]: E0412 18:22:33.898261 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.898611 kubelet[2815]: E0412 18:22:33.898585 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.898733 kubelet[2815]: W0412 18:22:33.898610 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.898934 kubelet[2815]: E0412 18:22:33.898894 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.898934 kubelet[2815]: W0412 18:22:33.898920 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.899230 kubelet[2815]: E0412 18:22:33.899186 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.899309 kubelet[2815]: W0412 18:22:33.899262 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.899309 kubelet[2815]: E0412 18:22:33.899293 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.899859 kubelet[2815]: E0412 18:22:33.899606 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.899859 kubelet[2815]: W0412 18:22:33.899634 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.899859 kubelet[2815]: E0412 18:22:33.899663 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.900109 kubelet[2815]: E0412 18:22:33.899946 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.900109 kubelet[2815]: W0412 18:22:33.899962 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.900109 kubelet[2815]: E0412 18:22:33.899987 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.900317 kubelet[2815]: E0412 18:22:33.900282 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.900317 kubelet[2815]: W0412 18:22:33.900309 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.900450 kubelet[2815]: E0412 18:22:33.900337 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.901640 kubelet[2815]: E0412 18:22:33.901596 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.901797 kubelet[2815]: E0412 18:22:33.901647 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.901797 kubelet[2815]: E0412 18:22:33.901678 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.901797 kubelet[2815]: W0412 18:22:33.901694 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.901797 kubelet[2815]: E0412 18:22:33.901722 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.902212 kubelet[2815]: E0412 18:22:33.902164 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.902212 kubelet[2815]: W0412 18:22:33.902194 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.902357 kubelet[2815]: E0412 18:22:33.902229 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.902632 kubelet[2815]: E0412 18:22:33.902598 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.902632 kubelet[2815]: W0412 18:22:33.902625 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.902793 kubelet[2815]: E0412 18:22:33.902652 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.903831 kubelet[2815]: E0412 18:22:33.903783 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.903831 kubelet[2815]: W0412 18:22:33.903817 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.904057 kubelet[2815]: E0412 18:22:33.903850 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.904194 kubelet[2815]: E0412 18:22:33.904157 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.904194 kubelet[2815]: W0412 18:22:33.904185 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.904332 kubelet[2815]: E0412 18:22:33.904213 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.904543 kubelet[2815]: E0412 18:22:33.904490 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.904620 kubelet[2815]: W0412 18:22:33.904557 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.904620 kubelet[2815]: E0412 18:22:33.904587 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.905180 kubelet[2815]: E0412 18:22:33.905040 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.905180 kubelet[2815]: W0412 18:22:33.905070 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.905180 kubelet[2815]: E0412 18:22:33.905099 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:33.905932 kubelet[2815]: E0412 18:22:33.905903 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:22:33.906025 kubelet[2815]: W0412 18:22:33.905931 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:22:33.906025 kubelet[2815]: E0412 18:22:33.905963 2815 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:22:34.309580 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3136861179.mount: Deactivated successfully. Apr 12 18:22:34.485582 env[1688]: time="2024-04-12T18:22:34.485499133Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:34.490311 env[1688]: time="2024-04-12T18:22:34.490264525Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:66b34d81f14321f94491856962a59366e9d87f710670399b48c106cb0970c607,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:34.494213 env[1688]: time="2024-04-12T18:22:34.494165420Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:34.504944 env[1688]: time="2024-04-12T18:22:34.504859175Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:256c6fee1c0cd345ce1c83a28132e3134a9f271704d41d214436bf7ec48ba4b8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:34.505671 env[1688]: time="2024-04-12T18:22:34.505620804Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.3\" returns image reference \"sha256:66b34d81f14321f94491856962a59366e9d87f710670399b48c106cb0970c607\"" Apr 12 18:22:34.512918 env[1688]: time="2024-04-12T18:22:34.512862381Z" level=info msg="CreateContainer within sandbox \"f4404fc97068496e5c65d0e570b768b102c5949a34e2d062852c1bb9ec4b7ba0\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Apr 12 18:22:34.549722 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3253551363.mount: Deactivated successfully. Apr 12 18:22:34.555816 env[1688]: time="2024-04-12T18:22:34.555727352Z" level=info msg="CreateContainer within sandbox \"f4404fc97068496e5c65d0e570b768b102c5949a34e2d062852c1bb9ec4b7ba0\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"1d68cf714b5c99b8b9156c3c7625d19447c82fcb28c399b2706a06ed99002d35\"" Apr 12 18:22:34.556843 env[1688]: time="2024-04-12T18:22:34.556775406Z" level=info msg="StartContainer for \"1d68cf714b5c99b8b9156c3c7625d19447c82fcb28c399b2706a06ed99002d35\"" Apr 12 18:22:34.623356 systemd[1]: run-containerd-runc-k8s.io-1d68cf714b5c99b8b9156c3c7625d19447c82fcb28c399b2706a06ed99002d35-runc.vBgLAc.mount: Deactivated successfully. Apr 12 18:22:34.646826 systemd[1]: Started cri-containerd-1d68cf714b5c99b8b9156c3c7625d19447c82fcb28c399b2706a06ed99002d35.scope. Apr 12 18:22:34.704000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.704000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3358 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:34.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164363863663731346235633939623862393135366333633736323564 Apr 12 18:22:34.705000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.705000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.705000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.705000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.705000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.705000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.705000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.705000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.705000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.705000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.705000 audit: BPF prog-id=142 op=LOAD Apr 12 18:22:34.705000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3358 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:34.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164363863663731346235633939623862393135366333633736323564 Apr 12 18:22:34.707000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.707000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.707000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.707000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.707000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.707000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.707000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.707000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.707000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.707000 audit: BPF prog-id=143 op=LOAD Apr 12 18:22:34.707000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3358 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:34.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164363863663731346235633939623862393135366333633736323564 Apr 12 18:22:34.708000 audit: BPF prog-id=143 op=UNLOAD Apr 12 18:22:34.708000 audit: BPF prog-id=142 op=UNLOAD Apr 12 18:22:34.708000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.708000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.708000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.708000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.708000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.708000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.708000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.708000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.708000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.708000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:34.708000 audit: BPF prog-id=144 op=LOAD Apr 12 18:22:34.708000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3358 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:34.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164363863663731346235633939623862393135366333633736323564 Apr 12 18:22:34.746008 env[1688]: time="2024-04-12T18:22:34.745937660Z" level=info msg="StartContainer for \"1d68cf714b5c99b8b9156c3c7625d19447c82fcb28c399b2706a06ed99002d35\" returns successfully" Apr 12 18:22:34.782638 kubelet[2815]: I0412 18:22:34.782586 2815 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Apr 12 18:22:34.786199 systemd[1]: cri-containerd-1d68cf714b5c99b8b9156c3c7625d19447c82fcb28c399b2706a06ed99002d35.scope: Deactivated successfully. Apr 12 18:22:34.791000 audit: BPF prog-id=144 op=UNLOAD Apr 12 18:22:34.832747 kubelet[2815]: I0412 18:22:34.832696 2815 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-5df7d7b56b-tgf67" podStartSLOduration=4.938470317 podCreationTimestamp="2024-04-12 18:22:27 +0000 UTC" firstStartedPulling="2024-04-12 18:22:29.695117379 +0000 UTC m=+23.430723193" lastFinishedPulling="2024-04-12 18:22:32.589289241 +0000 UTC m=+26.324895055" observedRunningTime="2024-04-12 18:22:33.800287212 +0000 UTC m=+27.535893110" watchObservedRunningTime="2024-04-12 18:22:34.832642179 +0000 UTC m=+28.568248005" Apr 12 18:22:34.875731 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1d68cf714b5c99b8b9156c3c7625d19447c82fcb28c399b2706a06ed99002d35-rootfs.mount: Deactivated successfully. Apr 12 18:22:35.309559 env[1688]: time="2024-04-12T18:22:35.309257616Z" level=info msg="shim disconnected" id=1d68cf714b5c99b8b9156c3c7625d19447c82fcb28c399b2706a06ed99002d35 Apr 12 18:22:35.309559 env[1688]: time="2024-04-12T18:22:35.309321506Z" level=warning msg="cleaning up after shim disconnected" id=1d68cf714b5c99b8b9156c3c7625d19447c82fcb28c399b2706a06ed99002d35 namespace=k8s.io Apr 12 18:22:35.309559 env[1688]: time="2024-04-12T18:22:35.309342567Z" level=info msg="cleaning up dead shim" Apr 12 18:22:35.324485 env[1688]: time="2024-04-12T18:22:35.324419755Z" level=warning msg="cleanup warnings time=\"2024-04-12T18:22:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3513 runtime=io.containerd.runc.v2\n" Apr 12 18:22:35.663587 kubelet[2815]: E0412 18:22:35.663152 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hb8c9" podUID=8c4bfb8a-7c26-460b-af4b-5242640fa2d2 Apr 12 18:22:35.789638 env[1688]: time="2024-04-12T18:22:35.789572696Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.3\"" Apr 12 18:22:37.094815 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3833639875.mount: Deactivated successfully. Apr 12 18:22:37.662913 kubelet[2815]: E0412 18:22:37.662727 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hb8c9" podUID=8c4bfb8a-7c26-460b-af4b-5242640fa2d2 Apr 12 18:22:39.663056 kubelet[2815]: E0412 18:22:39.662994 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hb8c9" podUID=8c4bfb8a-7c26-460b-af4b-5242640fa2d2 Apr 12 18:22:41.242429 env[1688]: time="2024-04-12T18:22:41.242374409Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:41.247220 env[1688]: time="2024-04-12T18:22:41.247169845Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2e7a18c897a455a364faa2c5ad2d2539f25e81e451e894d58c0107c58979291a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:41.249989 env[1688]: time="2024-04-12T18:22:41.249927034Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:41.252919 env[1688]: time="2024-04-12T18:22:41.252869088Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:21ccc42ae417f1082c03737e9da5fbfbd4a21732babfcef4cd34240eacf26b41,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:41.253864 env[1688]: time="2024-04-12T18:22:41.253819252Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.3\" returns image reference \"sha256:2e7a18c897a455a364faa2c5ad2d2539f25e81e451e894d58c0107c58979291a\"" Apr 12 18:22:41.262092 env[1688]: time="2024-04-12T18:22:41.262037068Z" level=info msg="CreateContainer within sandbox \"f4404fc97068496e5c65d0e570b768b102c5949a34e2d062852c1bb9ec4b7ba0\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Apr 12 18:22:41.288261 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1341940429.mount: Deactivated successfully. Apr 12 18:22:41.297399 env[1688]: time="2024-04-12T18:22:41.297328877Z" level=info msg="CreateContainer within sandbox \"f4404fc97068496e5c65d0e570b768b102c5949a34e2d062852c1bb9ec4b7ba0\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"60dabfaec3715e7870d502d0815bdca759d59d2316245ed9a4f09aa68e47fabe\"" Apr 12 18:22:41.299815 env[1688]: time="2024-04-12T18:22:41.299750296Z" level=info msg="StartContainer for \"60dabfaec3715e7870d502d0815bdca759d59d2316245ed9a4f09aa68e47fabe\"" Apr 12 18:22:41.344312 systemd[1]: Started cri-containerd-60dabfaec3715e7870d502d0815bdca759d59d2316245ed9a4f09aa68e47fabe.scope. Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.397571 kernel: kauditd_printk_skb: 91 callbacks suppressed Apr 12 18:22:41.397689 kernel: audit: type=1400 audit(1712946161.394:1159): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3358 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:41.416132 kernel: audit: type=1300 audit(1712946161.394:1159): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3358 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:41.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630646162666165633337313565373837306435303264303831356264 Apr 12 18:22:41.428373 kernel: audit: type=1327 audit(1712946161.394:1159): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630646162666165633337313565373837306435303264303831356264 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.440339 kernel: audit: type=1400 audit(1712946161.394:1160): avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.448743 kernel: audit: type=1400 audit(1712946161.394:1160): avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.457498 kernel: audit: type=1400 audit(1712946161.394:1160): avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.465690 kernel: audit: type=1400 audit(1712946161.394:1160): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.473460 kernel: audit: type=1400 audit(1712946161.394:1160): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.481837 kernel: audit: type=1400 audit(1712946161.394:1160): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.490968 kernel: audit: type=1400 audit(1712946161.394:1160): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit: BPF prog-id=145 op=LOAD Apr 12 18:22:41.394000 audit[3534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3358 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:41.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630646162666165633337313565373837306435303264303831356264 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit: BPF prog-id=146 op=LOAD Apr 12 18:22:41.394000 audit[3534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3358 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:41.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630646162666165633337313565373837306435303264303831356264 Apr 12 18:22:41.394000 audit: BPF prog-id=146 op=UNLOAD Apr 12 18:22:41.394000 audit: BPF prog-id=145 op=UNLOAD Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.496238 env[1688]: time="2024-04-12T18:22:41.494843788Z" level=info msg="StartContainer for \"60dabfaec3715e7870d502d0815bdca759d59d2316245ed9a4f09aa68e47fabe\" returns successfully" Apr 12 18:22:41.394000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:41.394000 audit: BPF prog-id=147 op=LOAD Apr 12 18:22:41.394000 audit[3534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3358 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:41.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630646162666165633337313565373837306435303264303831356264 Apr 12 18:22:41.663558 kubelet[2815]: E0412 18:22:41.663356 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hb8c9" podUID=8c4bfb8a-7c26-460b-af4b-5242640fa2d2 Apr 12 18:22:42.286037 env[1688]: time="2024-04-12T18:22:42.285951864Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Apr 12 18:22:42.290390 systemd[1]: cri-containerd-60dabfaec3715e7870d502d0815bdca759d59d2316245ed9a4f09aa68e47fabe.scope: Deactivated successfully. Apr 12 18:22:42.295000 audit: BPF prog-id=147 op=UNLOAD Apr 12 18:22:42.312963 kubelet[2815]: I0412 18:22:42.312922 2815 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Apr 12 18:22:42.344266 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-60dabfaec3715e7870d502d0815bdca759d59d2316245ed9a4f09aa68e47fabe-rootfs.mount: Deactivated successfully. Apr 12 18:22:42.367116 kubelet[2815]: I0412 18:22:42.366246 2815 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:22:42.378726 systemd[1]: Created slice kubepods-burstable-pod57867405_0bcd_40ab_85a4_c6c91b8c5414.slice. Apr 12 18:22:42.392648 kubelet[2815]: I0412 18:22:42.392471 2815 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:22:42.393952 kubelet[2815]: I0412 18:22:42.393903 2815 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:22:42.418153 systemd[1]: Created slice kubepods-burstable-pod706c716c_c7f3_456d_9f19_89c02d8057ce.slice. Apr 12 18:22:42.425661 systemd[1]: Created slice kubepods-besteffort-podbeaf4eff_3d47_41f0_ada6_96fa78b04ef4.slice. Apr 12 18:22:42.464235 kubelet[2815]: I0412 18:22:42.464159 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-j4hs9\" (UniqueName: \"kubernetes.io/projected/706c716c-c7f3-456d-9f19-89c02d8057ce-kube-api-access-j4hs9\") pod \"coredns-5d78c9869d-ql4pp\" (UID: \"706c716c-c7f3-456d-9f19-89c02d8057ce\") " pod="kube-system/coredns-5d78c9869d-ql4pp" Apr 12 18:22:42.464470 kubelet[2815]: I0412 18:22:42.464259 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/706c716c-c7f3-456d-9f19-89c02d8057ce-config-volume\") pod \"coredns-5d78c9869d-ql4pp\" (UID: \"706c716c-c7f3-456d-9f19-89c02d8057ce\") " pod="kube-system/coredns-5d78c9869d-ql4pp" Apr 12 18:22:42.464470 kubelet[2815]: I0412 18:22:42.464341 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/beaf4eff-3d47-41f0-ada6-96fa78b04ef4-tigera-ca-bundle\") pod \"calico-kube-controllers-7c6696f5dc-z9rmb\" (UID: \"beaf4eff-3d47-41f0-ada6-96fa78b04ef4\") " pod="calico-system/calico-kube-controllers-7c6696f5dc-z9rmb" Apr 12 18:22:42.464470 kubelet[2815]: I0412 18:22:42.464419 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8lxlm\" (UniqueName: \"kubernetes.io/projected/beaf4eff-3d47-41f0-ada6-96fa78b04ef4-kube-api-access-8lxlm\") pod \"calico-kube-controllers-7c6696f5dc-z9rmb\" (UID: \"beaf4eff-3d47-41f0-ada6-96fa78b04ef4\") " pod="calico-system/calico-kube-controllers-7c6696f5dc-z9rmb" Apr 12 18:22:42.464722 kubelet[2815]: I0412 18:22:42.464494 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/57867405-0bcd-40ab-85a4-c6c91b8c5414-config-volume\") pod \"coredns-5d78c9869d-68kq9\" (UID: \"57867405-0bcd-40ab-85a4-c6c91b8c5414\") " pod="kube-system/coredns-5d78c9869d-68kq9" Apr 12 18:22:42.464722 kubelet[2815]: I0412 18:22:42.464586 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8xpcl\" (UniqueName: \"kubernetes.io/projected/57867405-0bcd-40ab-85a4-c6c91b8c5414-kube-api-access-8xpcl\") pod \"coredns-5d78c9869d-68kq9\" (UID: \"57867405-0bcd-40ab-85a4-c6c91b8c5414\") " pod="kube-system/coredns-5d78c9869d-68kq9" Apr 12 18:22:42.695313 env[1688]: time="2024-04-12T18:22:42.695122060Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-68kq9,Uid:57867405-0bcd-40ab-85a4-c6c91b8c5414,Namespace:kube-system,Attempt:0,}" Apr 12 18:22:42.739390 env[1688]: time="2024-04-12T18:22:42.739323321Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7c6696f5dc-z9rmb,Uid:beaf4eff-3d47-41f0-ada6-96fa78b04ef4,Namespace:calico-system,Attempt:0,}" Apr 12 18:22:42.739901 env[1688]: time="2024-04-12T18:22:42.739323405Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-ql4pp,Uid:706c716c-c7f3-456d-9f19-89c02d8057ce,Namespace:kube-system,Attempt:0,}" Apr 12 18:22:43.113671 env[1688]: time="2024-04-12T18:22:43.113592484Z" level=info msg="shim disconnected" id=60dabfaec3715e7870d502d0815bdca759d59d2316245ed9a4f09aa68e47fabe Apr 12 18:22:43.113930 env[1688]: time="2024-04-12T18:22:43.113898745Z" level=warning msg="cleaning up after shim disconnected" id=60dabfaec3715e7870d502d0815bdca759d59d2316245ed9a4f09aa68e47fabe namespace=k8s.io Apr 12 18:22:43.114066 env[1688]: time="2024-04-12T18:22:43.114038933Z" level=info msg="cleaning up dead shim" Apr 12 18:22:43.169181 env[1688]: time="2024-04-12T18:22:43.169124249Z" level=warning msg="cleanup warnings time=\"2024-04-12T18:22:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3578 runtime=io.containerd.runc.v2\n" Apr 12 18:22:43.289784 env[1688]: time="2024-04-12T18:22:43.289679006Z" level=error msg="Failed to destroy network for sandbox \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.290394 env[1688]: time="2024-04-12T18:22:43.290346237Z" level=error msg="encountered an error cleaning up failed sandbox \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.290466 env[1688]: time="2024-04-12T18:22:43.290428619Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-68kq9,Uid:57867405-0bcd-40ab-85a4-c6c91b8c5414,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.290917 kubelet[2815]: E0412 18:22:43.290844 2815 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.291565 kubelet[2815]: E0412 18:22:43.291009 2815 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-68kq9" Apr 12 18:22:43.291565 kubelet[2815]: E0412 18:22:43.291073 2815 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-68kq9" Apr 12 18:22:43.291565 kubelet[2815]: E0412 18:22:43.291192 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-68kq9_kube-system(57867405-0bcd-40ab-85a4-c6c91b8c5414)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-68kq9_kube-system(57867405-0bcd-40ab-85a4-c6c91b8c5414)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-68kq9" podUID=57867405-0bcd-40ab-85a4-c6c91b8c5414 Apr 12 18:22:43.324425 env[1688]: time="2024-04-12T18:22:43.324344779Z" level=error msg="Failed to destroy network for sandbox \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.325073 env[1688]: time="2024-04-12T18:22:43.324993470Z" level=error msg="encountered an error cleaning up failed sandbox \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.325182 env[1688]: time="2024-04-12T18:22:43.325098329Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7c6696f5dc-z9rmb,Uid:beaf4eff-3d47-41f0-ada6-96fa78b04ef4,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.326434 kubelet[2815]: E0412 18:22:43.325677 2815 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.326434 kubelet[2815]: E0412 18:22:43.325783 2815 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7c6696f5dc-z9rmb" Apr 12 18:22:43.326434 kubelet[2815]: E0412 18:22:43.325853 2815 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7c6696f5dc-z9rmb" Apr 12 18:22:43.326939 kubelet[2815]: E0412 18:22:43.325974 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7c6696f5dc-z9rmb_calico-system(beaf4eff-3d47-41f0-ada6-96fa78b04ef4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7c6696f5dc-z9rmb_calico-system(beaf4eff-3d47-41f0-ada6-96fa78b04ef4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7c6696f5dc-z9rmb" podUID=beaf4eff-3d47-41f0-ada6-96fa78b04ef4 Apr 12 18:22:43.347882 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55-shm.mount: Deactivated successfully. Apr 12 18:22:43.352808 env[1688]: time="2024-04-12T18:22:43.352733474Z" level=error msg="Failed to destroy network for sandbox \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.356035 env[1688]: time="2024-04-12T18:22:43.355961842Z" level=error msg="encountered an error cleaning up failed sandbox \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.356275 env[1688]: time="2024-04-12T18:22:43.356227073Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-ql4pp,Uid:706c716c-c7f3-456d-9f19-89c02d8057ce,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.356386 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d-shm.mount: Deactivated successfully. Apr 12 18:22:43.358243 kubelet[2815]: E0412 18:22:43.358183 2815 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.358424 kubelet[2815]: E0412 18:22:43.358270 2815 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-ql4pp" Apr 12 18:22:43.358424 kubelet[2815]: E0412 18:22:43.358309 2815 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-ql4pp" Apr 12 18:22:43.358424 kubelet[2815]: E0412 18:22:43.358399 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-ql4pp_kube-system(706c716c-c7f3-456d-9f19-89c02d8057ce)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-ql4pp_kube-system(706c716c-c7f3-456d-9f19-89c02d8057ce)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-ql4pp" podUID=706c716c-c7f3-456d-9f19-89c02d8057ce Apr 12 18:22:43.673220 systemd[1]: Created slice kubepods-besteffort-pod8c4bfb8a_7c26_460b_af4b_5242640fa2d2.slice. Apr 12 18:22:43.678900 env[1688]: time="2024-04-12T18:22:43.678843993Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hb8c9,Uid:8c4bfb8a-7c26-460b-af4b-5242640fa2d2,Namespace:calico-system,Attempt:0,}" Apr 12 18:22:43.789601 env[1688]: time="2024-04-12T18:22:43.789517176Z" level=error msg="Failed to destroy network for sandbox \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.792972 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34-shm.mount: Deactivated successfully. Apr 12 18:22:43.795567 env[1688]: time="2024-04-12T18:22:43.794493310Z" level=error msg="encountered an error cleaning up failed sandbox \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.795567 env[1688]: time="2024-04-12T18:22:43.794631134Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hb8c9,Uid:8c4bfb8a-7c26-460b-af4b-5242640fa2d2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.797892 kubelet[2815]: E0412 18:22:43.797851 2815 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.798051 kubelet[2815]: E0412 18:22:43.797953 2815 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-hb8c9" Apr 12 18:22:43.798051 kubelet[2815]: E0412 18:22:43.798020 2815 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-hb8c9" Apr 12 18:22:43.801591 kubelet[2815]: E0412 18:22:43.801529 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-hb8c9_calico-system(8c4bfb8a-7c26-460b-af4b-5242640fa2d2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-hb8c9_calico-system(8c4bfb8a-7c26-460b-af4b-5242640fa2d2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-hb8c9" podUID=8c4bfb8a-7c26-460b-af4b-5242640fa2d2 Apr 12 18:22:43.816123 kubelet[2815]: I0412 18:22:43.816067 2815 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:22:43.818310 env[1688]: time="2024-04-12T18:22:43.818255056Z" level=info msg="StopPodSandbox for \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\"" Apr 12 18:22:43.825534 env[1688]: time="2024-04-12T18:22:43.825466266Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.3\"" Apr 12 18:22:43.827603 kubelet[2815]: I0412 18:22:43.827056 2815 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:22:43.828255 env[1688]: time="2024-04-12T18:22:43.828192876Z" level=info msg="StopPodSandbox for \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\"" Apr 12 18:22:43.832023 kubelet[2815]: I0412 18:22:43.831375 2815 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:22:43.834077 env[1688]: time="2024-04-12T18:22:43.832683344Z" level=info msg="StopPodSandbox for \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\"" Apr 12 18:22:43.841417 kubelet[2815]: I0412 18:22:43.840853 2815 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:22:43.843419 env[1688]: time="2024-04-12T18:22:43.843364297Z" level=info msg="StopPodSandbox for \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\"" Apr 12 18:22:43.972920 env[1688]: time="2024-04-12T18:22:43.972741489Z" level=error msg="StopPodSandbox for \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\" failed" error="failed to destroy network for sandbox \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.973852 kubelet[2815]: E0412 18:22:43.973610 2815 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:22:43.973852 kubelet[2815]: E0412 18:22:43.973688 2815 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34} Apr 12 18:22:43.973852 kubelet[2815]: E0412 18:22:43.973758 2815 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8c4bfb8a-7c26-460b-af4b-5242640fa2d2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Apr 12 18:22:43.973852 kubelet[2815]: E0412 18:22:43.973811 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8c4bfb8a-7c26-460b-af4b-5242640fa2d2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-hb8c9" podUID=8c4bfb8a-7c26-460b-af4b-5242640fa2d2 Apr 12 18:22:43.978129 env[1688]: time="2024-04-12T18:22:43.978031852Z" level=error msg="StopPodSandbox for \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\" failed" error="failed to destroy network for sandbox \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.978696 kubelet[2815]: E0412 18:22:43.978629 2815 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:22:43.978880 kubelet[2815]: E0412 18:22:43.978744 2815 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d} Apr 12 18:22:43.978880 kubelet[2815]: E0412 18:22:43.978844 2815 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"706c716c-c7f3-456d-9f19-89c02d8057ce\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Apr 12 18:22:43.979094 kubelet[2815]: E0412 18:22:43.978923 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"706c716c-c7f3-456d-9f19-89c02d8057ce\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-ql4pp" podUID=706c716c-c7f3-456d-9f19-89c02d8057ce Apr 12 18:22:43.979207 env[1688]: time="2024-04-12T18:22:43.979144584Z" level=error msg="StopPodSandbox for \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\" failed" error="failed to destroy network for sandbox \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.979583 kubelet[2815]: E0412 18:22:43.979494 2815 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:22:43.979682 kubelet[2815]: E0412 18:22:43.979599 2815 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18} Apr 12 18:22:43.979777 kubelet[2815]: E0412 18:22:43.979685 2815 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"beaf4eff-3d47-41f0-ada6-96fa78b04ef4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Apr 12 18:22:43.979777 kubelet[2815]: E0412 18:22:43.979760 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"beaf4eff-3d47-41f0-ada6-96fa78b04ef4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7c6696f5dc-z9rmb" podUID=beaf4eff-3d47-41f0-ada6-96fa78b04ef4 Apr 12 18:22:43.982450 env[1688]: time="2024-04-12T18:22:43.982368188Z" level=error msg="StopPodSandbox for \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\" failed" error="failed to destroy network for sandbox \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:22:43.982956 kubelet[2815]: E0412 18:22:43.982920 2815 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:22:43.983085 kubelet[2815]: E0412 18:22:43.983007 2815 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55} Apr 12 18:22:43.983164 kubelet[2815]: E0412 18:22:43.983095 2815 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"57867405-0bcd-40ab-85a4-c6c91b8c5414\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Apr 12 18:22:43.983275 kubelet[2815]: E0412 18:22:43.983173 2815 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"57867405-0bcd-40ab-85a4-c6c91b8c5414\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-68kq9" podUID=57867405-0bcd-40ab-85a4-c6c91b8c5414 Apr 12 18:22:50.795061 kubelet[2815]: I0412 18:22:50.795004 2815 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Apr 12 18:22:50.896000 audit[3799]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=3799 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:50.899216 kernel: kauditd_printk_skb: 34 callbacks suppressed Apr 12 18:22:50.899379 kernel: audit: type=1325 audit(1712946170.896:1166): table=filter:95 family=2 entries=15 op=nft_register_rule pid=3799 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:50.896000 audit[3799]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=fffff76d7450 a2=0 a3=1 items=0 ppid=2954 pid=3799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:50.920178 kernel: audit: type=1300 audit(1712946170.896:1166): arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=fffff76d7450 a2=0 a3=1 items=0 ppid=2954 pid=3799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:50.896000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:50.926727 kernel: audit: type=1327 audit(1712946170.896:1166): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:50.907000 audit[3799]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=3799 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:50.933468 kernel: audit: type=1325 audit(1712946170.907:1167): table=nat:96 family=2 entries=19 op=nft_register_chain pid=3799 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:22:50.907000 audit[3799]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=fffff76d7450 a2=0 a3=1 items=0 ppid=2954 pid=3799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:50.948668 kernel: audit: type=1300 audit(1712946170.907:1167): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=fffff76d7450 a2=0 a3=1 items=0 ppid=2954 pid=3799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:50.907000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:50.956496 kernel: audit: type=1327 audit(1712946170.907:1167): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:22:53.149727 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1093797380.mount: Deactivated successfully. Apr 12 18:22:53.289726 env[1688]: time="2024-04-12T18:22:53.289636486Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:53.293291 env[1688]: time="2024-04-12T18:22:53.293220148Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:39692ef1d182c22e6162a9c49869a9092df8da5455f3c75e4aa19a347e4a375d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:53.296267 env[1688]: time="2024-04-12T18:22:53.296197125Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:53.299382 env[1688]: time="2024-04-12T18:22:53.299320994Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:0dec3ede02137c9bc7a49b50006739ddb7c20fc2b8fa12d2bd8234c680e8df34,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:22:53.300870 env[1688]: time="2024-04-12T18:22:53.300815129Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.3\" returns image reference \"sha256:39692ef1d182c22e6162a9c49869a9092df8da5455f3c75e4aa19a347e4a375d\"" Apr 12 18:22:53.333921 env[1688]: time="2024-04-12T18:22:53.333869257Z" level=info msg="CreateContainer within sandbox \"f4404fc97068496e5c65d0e570b768b102c5949a34e2d062852c1bb9ec4b7ba0\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Apr 12 18:22:53.357752 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3438427456.mount: Deactivated successfully. Apr 12 18:22:53.367615 env[1688]: time="2024-04-12T18:22:53.367551467Z" level=info msg="CreateContainer within sandbox \"f4404fc97068496e5c65d0e570b768b102c5949a34e2d062852c1bb9ec4b7ba0\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"c8381af262fb63792b56533a6be99959b5e531c9d7dde533d05b101f5c8fb259\"" Apr 12 18:22:53.370739 env[1688]: time="2024-04-12T18:22:53.369105277Z" level=info msg="StartContainer for \"c8381af262fb63792b56533a6be99959b5e531c9d7dde533d05b101f5c8fb259\"" Apr 12 18:22:53.406747 systemd[1]: Started cri-containerd-c8381af262fb63792b56533a6be99959b5e531c9d7dde533d05b101f5c8fb259.scope. Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40002155a0 a2=3c a3=0 items=0 ppid=3358 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:53.467571 kernel: audit: type=1400 audit(1712946173.446:1168): avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.467753 kernel: audit: type=1300 audit(1712946173.446:1168): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40002155a0 a2=3c a3=0 items=0 ppid=3358 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:53.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338333831616632363266623633373932623536353333613662653939 Apr 12 18:22:53.479083 kernel: audit: type=1327 audit(1712946173.446:1168): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338333831616632363266623633373932623536353333613662653939 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.487545 kernel: audit: type=1400 audit(1712946173.446:1169): avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit: BPF prog-id=148 op=LOAD Apr 12 18:22:53.446000 audit[3810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40002158e0 a2=78 a3=0 items=0 ppid=3358 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:53.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338333831616632363266623633373932623536353333613662653939 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit: BPF prog-id=149 op=LOAD Apr 12 18:22:53.446000 audit[3810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000215670 a2=78 a3=0 items=0 ppid=3358 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:53.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338333831616632363266623633373932623536353333613662653939 Apr 12 18:22:53.446000 audit: BPF prog-id=149 op=UNLOAD Apr 12 18:22:53.446000 audit: BPF prog-id=148 op=UNLOAD Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:53.446000 audit: BPF prog-id=150 op=LOAD Apr 12 18:22:53.446000 audit[3810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000215b40 a2=78 a3=0 items=0 ppid=3358 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:53.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338333831616632363266623633373932623536353333613662653939 Apr 12 18:22:53.516406 env[1688]: time="2024-04-12T18:22:53.516335293Z" level=info msg="StartContainer for \"c8381af262fb63792b56533a6be99959b5e531c9d7dde533d05b101f5c8fb259\" returns successfully" Apr 12 18:22:53.742995 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Apr 12 18:22:53.743294 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Apr 12 18:22:55.468000 audit[3919]: AVC avc: denied { write } for pid=3919 comm="tee" name="fd" dev="proc" ino=21563 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:22:55.468000 audit[3919]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffee0be972 a2=241 a3=1b6 items=1 ppid=3890 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:55.468000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Apr 12 18:22:55.468000 audit: PATH item=0 name="/dev/fd/63" inode=21553 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:22:55.468000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:22:55.494000 audit[3924]: AVC avc: denied { write } for pid=3924 comm="tee" name="fd" dev="proc" ino=21580 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:22:55.510000 audit[3933]: AVC avc: denied { write } for pid=3933 comm="tee" name="fd" dev="proc" ino=21585 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:22:55.513000 audit[3936]: AVC avc: denied { write } for pid=3936 comm="tee" name="fd" dev="proc" ino=21588 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:22:55.494000 audit[3924]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcffc8971 a2=241 a3=1b6 items=1 ppid=3879 pid=3924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:55.494000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Apr 12 18:22:55.494000 audit: PATH item=0 name="/dev/fd/63" inode=21560 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:22:55.494000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:22:55.519000 audit[3939]: AVC avc: denied { write } for pid=3939 comm="tee" name="fd" dev="proc" ino=20797 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:22:55.519000 audit[3939]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd8f64981 a2=241 a3=1b6 items=1 ppid=3874 pid=3939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:55.519000 audit: CWD cwd="/etc/service/enabled/felix/log" Apr 12 18:22:55.519000 audit: PATH item=0 name="/dev/fd/63" inode=20793 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:22:55.519000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:22:55.521000 audit[3937]: AVC avc: denied { write } for pid=3937 comm="tee" name="fd" dev="proc" ino=21593 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:22:55.527000 audit[3944]: AVC avc: denied { write } for pid=3944 comm="tee" name="fd" dev="proc" ino=20801 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:22:55.527000 audit[3944]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc1198981 a2=241 a3=1b6 items=1 ppid=3877 pid=3944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:55.527000 audit: CWD cwd="/etc/service/enabled/confd/log" Apr 12 18:22:55.527000 audit: PATH item=0 name="/dev/fd/63" inode=20794 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:22:55.527000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:22:55.510000 audit[3933]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc6273983 a2=241 a3=1b6 items=1 ppid=3878 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:55.510000 audit: CWD cwd="/etc/service/enabled/cni/log" Apr 12 18:22:55.510000 audit: PATH item=0 name="/dev/fd/63" inode=21573 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:22:55.510000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:22:55.513000 audit[3936]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdcc25981 a2=241 a3=1b6 items=1 ppid=3876 pid=3936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:55.513000 audit: CWD cwd="/etc/service/enabled/bird6/log" Apr 12 18:22:55.513000 audit: PATH item=0 name="/dev/fd/63" inode=21574 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:22:55.513000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:22:55.521000 audit[3937]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe2804982 a2=241 a3=1b6 items=1 ppid=3882 pid=3937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:55.521000 audit: CWD cwd="/etc/service/enabled/bird/log" Apr 12 18:22:55.521000 audit: PATH item=0 name="/dev/fd/63" inode=20792 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:22:55.521000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:22:56.249714 (udev-worker)[3841]: Network interface NamePolicy= disabled on kernel command line. Apr 12 18:22:56.249771 (udev-worker)[4013]: Network interface NamePolicy= disabled on kernel command line. Apr 12 18:22:56.267017 kernel: kauditd_printk_skb: 74 callbacks suppressed Apr 12 18:22:56.267204 kernel: audit: type=1400 audit(1712946176.253:1181): avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.267272 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Apr 12 18:22:56.267324 kernel: audit: type=1400 audit(1712946176.253:1181): avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.267370 kernel: audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.276712 kernel: audit: type=1400 audit(1712946176.253:1181): avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.276828 kernel: audit: backlog limit exceeded Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.292752 kernel: audit: type=1400 audit(1712946176.253:1181): avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.292889 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Apr 12 18:22:56.298006 kernel: audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 Apr 12 18:22:56.300054 kernel: audit: backlog limit exceeded Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit: BPF prog-id=151 op=LOAD Apr 12 18:22:56.253000 audit[4016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc0dc3b68 a2=70 a3=ffffc0dc3bd8 items=0 ppid=3875 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.253000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:22:56.253000 audit: BPF prog-id=151 op=UNLOAD Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.253000 audit: BPF prog-id=152 op=LOAD Apr 12 18:22:56.253000 audit[4016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc0dc3b68 a2=70 a3=4b243c items=0 ppid=3875 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.253000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:22:56.254000 audit: BPF prog-id=152 op=UNLOAD Apr 12 18:22:56.254000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.254000 audit[4016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc0dc3b20 a2=70 a3=ffffc0dc3b90 items=0 ppid=3875 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.254000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:22:56.254000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.254000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.254000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.254000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.254000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.254000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.254000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.254000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.254000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.254000 audit: BPF prog-id=153 op=LOAD Apr 12 18:22:56.254000 audit[4016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc0dc3b08 a2=70 a3=ffffc0dc3b78 items=0 ppid=3875 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.254000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:22:56.254000 audit: BPF prog-id=153 op=UNLOAD Apr 12 18:22:56.254000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.254000 audit[4016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc0dc3bd8 a2=70 a3=0 items=0 ppid=3875 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.254000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:22:56.254000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.254000 audit[4016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc0dc3bc8 a2=70 a3=0 items=0 ppid=3875 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.254000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:22:56.254000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.254000 audit[4016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc0dc3b38 a2=70 a3=0 items=0 ppid=3875 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.254000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:22:56.255000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.255000 audit[4016]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffc0dc3c10 a2=70 a3=849898f items=0 ppid=3875 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.255000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:22:56.255000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.255000 audit[4016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc0dc3c10 a2=70 a3=849898f items=0 ppid=3875 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.255000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:22:56.255000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.255000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.255000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.255000 audit[4016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc0dc3b38 a2=70 a3=84989a9 items=0 ppid=3875 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.255000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:22:56.321000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.321000 audit[4020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe3ab8f28 a2=70 a3=ffffe3ab8f98 items=0 ppid=3875 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Apr 12 18:22:56.322000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:56.322000 audit[4020]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe3ab8df8 a2=70 a3=ffffe3ab8e68 items=0 ppid=3875 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.322000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Apr 12 18:22:56.329000 audit: BPF prog-id=154 op=UNLOAD Apr 12 18:22:56.424000 audit[4042]: NETFILTER_CFG table=mangle:97 family=2 entries=16 op=nft_register_chain pid=4042 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:22:56.424000 audit[4042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffdac73c10 a2=0 a3=ffff9205ffa8 items=0 ppid=3875 pid=4042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.424000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:22:56.435000 audit[4041]: NETFILTER_CFG table=raw:98 family=2 entries=19 op=nft_register_chain pid=4041 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:22:56.435000 audit[4041]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6992 a0=3 a1=ffffe952e9f0 a2=0 a3=ffffa4a52fa8 items=0 ppid=3875 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.435000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:22:56.437000 audit[4044]: NETFILTER_CFG table=nat:99 family=2 entries=15 op=nft_register_chain pid=4044 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:22:56.437000 audit[4044]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffc79a2b60 a2=0 a3=ffffb3c03fa8 items=0 ppid=3875 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.437000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:22:56.448000 audit[4047]: NETFILTER_CFG table=filter:100 family=2 entries=39 op=nft_register_chain pid=4047 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:22:56.448000 audit[4047]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18968 a0=3 a1=ffffdf90fd70 a2=0 a3=ffffa92a0fa8 items=0 ppid=3875 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:56.448000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:22:57.063716 systemd-networkd[1498]: vxlan.calico: Link UP Apr 12 18:22:57.063736 systemd-networkd[1498]: vxlan.calico: Gained carrier Apr 12 18:22:57.664265 env[1688]: time="2024-04-12T18:22:57.664210752Z" level=info msg="StopPodSandbox for \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\"" Apr 12 18:22:57.665236 env[1688]: time="2024-04-12T18:22:57.665081895Z" level=info msg="StopPodSandbox for \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\"" Apr 12 18:22:57.802554 kubelet[2815]: I0412 18:22:57.802465 2815 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-v6sv8" podStartSLOduration=7.437231672 podCreationTimestamp="2024-04-12 18:22:27 +0000 UTC" firstStartedPulling="2024-04-12 18:22:29.936090259 +0000 UTC m=+23.671696073" lastFinishedPulling="2024-04-12 18:22:53.301230533 +0000 UTC m=+47.036836359" observedRunningTime="2024-04-12 18:22:53.917904004 +0000 UTC m=+47.653509854" watchObservedRunningTime="2024-04-12 18:22:57.802371958 +0000 UTC m=+51.537977784" Apr 12 18:22:57.944232 env[1688]: 2024-04-12 18:22:57.803 [INFO][4081] k8s.go 585: Cleaning up netns ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:22:57.944232 env[1688]: 2024-04-12 18:22:57.804 [INFO][4081] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" iface="eth0" netns="/var/run/netns/cni-1e442168-2fc5-b838-f131-08326516662e" Apr 12 18:22:57.944232 env[1688]: 2024-04-12 18:22:57.805 [INFO][4081] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" iface="eth0" netns="/var/run/netns/cni-1e442168-2fc5-b838-f131-08326516662e" Apr 12 18:22:57.944232 env[1688]: 2024-04-12 18:22:57.806 [INFO][4081] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" iface="eth0" netns="/var/run/netns/cni-1e442168-2fc5-b838-f131-08326516662e" Apr 12 18:22:57.944232 env[1688]: 2024-04-12 18:22:57.806 [INFO][4081] k8s.go 592: Releasing IP address(es) ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:22:57.944232 env[1688]: 2024-04-12 18:22:57.806 [INFO][4081] utils.go 188: Calico CNI releasing IP address ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:22:57.944232 env[1688]: 2024-04-12 18:22:57.901 [INFO][4099] ipam_plugin.go 415: Releasing address using handleID ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" HandleID="k8s-pod-network.b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:22:57.944232 env[1688]: 2024-04-12 18:22:57.902 [INFO][4099] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:22:57.944232 env[1688]: 2024-04-12 18:22:57.902 [INFO][4099] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:22:57.944232 env[1688]: 2024-04-12 18:22:57.933 [WARNING][4099] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" HandleID="k8s-pod-network.b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:22:57.944232 env[1688]: 2024-04-12 18:22:57.933 [INFO][4099] ipam_plugin.go 443: Releasing address using workloadID ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" HandleID="k8s-pod-network.b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:22:57.944232 env[1688]: 2024-04-12 18:22:57.936 [INFO][4099] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:22:57.944232 env[1688]: 2024-04-12 18:22:57.940 [INFO][4081] k8s.go 598: Teardown processing complete. ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:22:57.955023 env[1688]: time="2024-04-12T18:22:57.954722368Z" level=info msg="TearDown network for sandbox \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\" successfully" Apr 12 18:22:57.955023 env[1688]: time="2024-04-12T18:22:57.954790325Z" level=info msg="StopPodSandbox for \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\" returns successfully" Apr 12 18:22:57.955952 env[1688]: time="2024-04-12T18:22:57.955861569Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-68kq9,Uid:57867405-0bcd-40ab-85a4-c6c91b8c5414,Namespace:kube-system,Attempt:1,}" Apr 12 18:22:57.956879 systemd[1]: run-netns-cni\x2d1e442168\x2d2fc5\x2db838\x2df131\x2d08326516662e.mount: Deactivated successfully. Apr 12 18:22:58.025708 env[1688]: 2024-04-12 18:22:57.803 [INFO][4087] k8s.go 585: Cleaning up netns ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:22:58.025708 env[1688]: 2024-04-12 18:22:57.806 [INFO][4087] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" iface="eth0" netns="/var/run/netns/cni-b0436866-5628-b523-8193-ae3ae854c8fe" Apr 12 18:22:58.025708 env[1688]: 2024-04-12 18:22:57.807 [INFO][4087] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" iface="eth0" netns="/var/run/netns/cni-b0436866-5628-b523-8193-ae3ae854c8fe" Apr 12 18:22:58.025708 env[1688]: 2024-04-12 18:22:57.808 [INFO][4087] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" iface="eth0" netns="/var/run/netns/cni-b0436866-5628-b523-8193-ae3ae854c8fe" Apr 12 18:22:58.025708 env[1688]: 2024-04-12 18:22:57.808 [INFO][4087] k8s.go 592: Releasing IP address(es) ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:22:58.025708 env[1688]: 2024-04-12 18:22:57.808 [INFO][4087] utils.go 188: Calico CNI releasing IP address ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:22:58.025708 env[1688]: 2024-04-12 18:22:57.904 [INFO][4098] ipam_plugin.go 415: Releasing address using handleID ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" HandleID="k8s-pod-network.8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Workload="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:22:58.025708 env[1688]: 2024-04-12 18:22:57.904 [INFO][4098] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:22:58.025708 env[1688]: 2024-04-12 18:22:57.936 [INFO][4098] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:22:58.025708 env[1688]: 2024-04-12 18:22:57.967 [WARNING][4098] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" HandleID="k8s-pod-network.8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Workload="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:22:58.025708 env[1688]: 2024-04-12 18:22:57.968 [INFO][4098] ipam_plugin.go 443: Releasing address using workloadID ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" HandleID="k8s-pod-network.8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Workload="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:22:58.025708 env[1688]: 2024-04-12 18:22:57.973 [INFO][4098] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:22:58.025708 env[1688]: 2024-04-12 18:22:58.014 [INFO][4087] k8s.go 598: Teardown processing complete. ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:22:58.025358 systemd[1]: run-netns-cni\x2db0436866\x2d5628\x2db523\x2d8193\x2dae3ae854c8fe.mount: Deactivated successfully. Apr 12 18:22:58.026750 env[1688]: time="2024-04-12T18:22:58.025710104Z" level=info msg="TearDown network for sandbox \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\" successfully" Apr 12 18:22:58.026750 env[1688]: time="2024-04-12T18:22:58.025773308Z" level=info msg="StopPodSandbox for \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\" returns successfully" Apr 12 18:22:58.030830 env[1688]: time="2024-04-12T18:22:58.030772987Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7c6696f5dc-z9rmb,Uid:beaf4eff-3d47-41f0-ada6-96fa78b04ef4,Namespace:calico-system,Attempt:1,}" Apr 12 18:22:58.371470 (udev-worker)[4018]: Network interface NamePolicy= disabled on kernel command line. Apr 12 18:22:58.378367 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Apr 12 18:22:58.378566 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif0ca4128ec3: link becomes ready Apr 12 18:22:58.375811 systemd-networkd[1498]: calif0ca4128ec3: Link UP Apr 12 18:22:58.378438 systemd-networkd[1498]: calif0ca4128ec3: Gained carrier Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.162 [INFO][4110] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0 coredns-5d78c9869d- kube-system 57867405-0bcd-40ab-85a4-c6c91b8c5414 728 0 2024-04-12 18:22:19 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-30-133 coredns-5d78c9869d-68kq9 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calif0ca4128ec3 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" Namespace="kube-system" Pod="coredns-5d78c9869d-68kq9" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-" Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.162 [INFO][4110] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" Namespace="kube-system" Pod="coredns-5d78c9869d-68kq9" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.239 [INFO][4132] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" HandleID="k8s-pod-network.9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.276 [INFO][4132] ipam_plugin.go 268: Auto assigning IP ContainerID="9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" HandleID="k8s-pod-network.9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002f7130), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-30-133", "pod":"coredns-5d78c9869d-68kq9", "timestamp":"2024-04-12 18:22:58.239001189 +0000 UTC"}, Hostname:"ip-172-31-30-133", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.276 [INFO][4132] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.276 [INFO][4132] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.276 [INFO][4132] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-133' Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.286 [INFO][4132] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" host="ip-172-31-30-133" Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.304 [INFO][4132] ipam.go 372: Looking up existing affinities for host host="ip-172-31-30-133" Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.319 [INFO][4132] ipam.go 489: Trying affinity for 192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.332 [INFO][4132] ipam.go 155: Attempting to load block cidr=192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.343 [INFO][4132] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.344 [INFO][4132] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.60.128/26 handle="k8s-pod-network.9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" host="ip-172-31-30-133" Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.347 [INFO][4132] ipam.go 1682: Creating new handle: k8s-pod-network.9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.354 [INFO][4132] ipam.go 1203: Writing block in order to claim IPs block=192.168.60.128/26 handle="k8s-pod-network.9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" host="ip-172-31-30-133" Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.363 [INFO][4132] ipam.go 1216: Successfully claimed IPs: [192.168.60.129/26] block=192.168.60.128/26 handle="k8s-pod-network.9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" host="ip-172-31-30-133" Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.363 [INFO][4132] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.60.129/26] handle="k8s-pod-network.9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" host="ip-172-31-30-133" Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.363 [INFO][4132] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:22:58.417811 env[1688]: 2024-04-12 18:22:58.363 [INFO][4132] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.60.129/26] IPv6=[] ContainerID="9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" HandleID="k8s-pod-network.9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:22:58.419214 env[1688]: 2024-04-12 18:22:58.366 [INFO][4110] k8s.go 385: Populated endpoint ContainerID="9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" Namespace="kube-system" Pod="coredns-5d78c9869d-68kq9" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"57867405-0bcd-40ab-85a4-c6c91b8c5414", ResourceVersion:"728", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"", Pod:"coredns-5d78c9869d-68kq9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif0ca4128ec3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:22:58.419214 env[1688]: 2024-04-12 18:22:58.366 [INFO][4110] k8s.go 386: Calico CNI using IPs: [192.168.60.129/32] ContainerID="9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" Namespace="kube-system" Pod="coredns-5d78c9869d-68kq9" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:22:58.419214 env[1688]: 2024-04-12 18:22:58.366 [INFO][4110] dataplane_linux.go 68: Setting the host side veth name to calif0ca4128ec3 ContainerID="9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" Namespace="kube-system" Pod="coredns-5d78c9869d-68kq9" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:22:58.419214 env[1688]: 2024-04-12 18:22:58.382 [INFO][4110] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" Namespace="kube-system" Pod="coredns-5d78c9869d-68kq9" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:22:58.419214 env[1688]: 2024-04-12 18:22:58.383 [INFO][4110] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" Namespace="kube-system" Pod="coredns-5d78c9869d-68kq9" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"57867405-0bcd-40ab-85a4-c6c91b8c5414", ResourceVersion:"728", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec", Pod:"coredns-5d78c9869d-68kq9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif0ca4128ec3", MAC:"3e:7a:fa:9d:69:c1", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:22:58.419214 env[1688]: 2024-04-12 18:22:58.413 [INFO][4110] k8s.go 498: Wrote updated endpoint to datastore ContainerID="9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec" Namespace="kube-system" Pod="coredns-5d78c9869d-68kq9" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:22:58.425212 systemd-networkd[1498]: vxlan.calico: Gained IPv6LL Apr 12 18:22:58.461475 env[1688]: time="2024-04-12T18:22:58.461338635Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:22:58.461813 env[1688]: time="2024-04-12T18:22:58.461763413Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:22:58.461980 env[1688]: time="2024-04-12T18:22:58.461934318Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:22:58.462420 env[1688]: time="2024-04-12T18:22:58.462347887Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec pid=4165 runtime=io.containerd.runc.v2 Apr 12 18:22:58.485654 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid18c80e65e6: link becomes ready Apr 12 18:22:58.483780 systemd-networkd[1498]: calid18c80e65e6: Link UP Apr 12 18:22:58.484204 systemd-networkd[1498]: calid18c80e65e6: Gained carrier Apr 12 18:22:58.529205 systemd[1]: Started cri-containerd-9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec.scope. Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.195 [INFO][4119] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0 calico-kube-controllers-7c6696f5dc- calico-system beaf4eff-3d47-41f0-ada6-96fa78b04ef4 727 0 2024-04-12 18:22:28 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7c6696f5dc projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-30-133 calico-kube-controllers-7c6696f5dc-z9rmb eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calid18c80e65e6 [] []}} ContainerID="e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" Namespace="calico-system" Pod="calico-kube-controllers-7c6696f5dc-z9rmb" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-" Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.195 [INFO][4119] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" Namespace="calico-system" Pod="calico-kube-controllers-7c6696f5dc-z9rmb" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.312 [INFO][4138] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" HandleID="k8s-pod-network.e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" Workload="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.344 [INFO][4138] ipam_plugin.go 268: Auto assigning IP ContainerID="e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" HandleID="k8s-pod-network.e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" Workload="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002efe40), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-30-133", "pod":"calico-kube-controllers-7c6696f5dc-z9rmb", "timestamp":"2024-04-12 18:22:58.312483556 +0000 UTC"}, Hostname:"ip-172-31-30-133", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.345 [INFO][4138] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.364 [INFO][4138] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.364 [INFO][4138] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-133' Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.386 [INFO][4138] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" host="ip-172-31-30-133" Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.407 [INFO][4138] ipam.go 372: Looking up existing affinities for host host="ip-172-31-30-133" Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.430 [INFO][4138] ipam.go 489: Trying affinity for 192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.435 [INFO][4138] ipam.go 155: Attempting to load block cidr=192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.440 [INFO][4138] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.440 [INFO][4138] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.60.128/26 handle="k8s-pod-network.e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" host="ip-172-31-30-133" Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.445 [INFO][4138] ipam.go 1682: Creating new handle: k8s-pod-network.e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12 Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.451 [INFO][4138] ipam.go 1203: Writing block in order to claim IPs block=192.168.60.128/26 handle="k8s-pod-network.e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" host="ip-172-31-30-133" Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.468 [INFO][4138] ipam.go 1216: Successfully claimed IPs: [192.168.60.130/26] block=192.168.60.128/26 handle="k8s-pod-network.e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" host="ip-172-31-30-133" Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.468 [INFO][4138] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.60.130/26] handle="k8s-pod-network.e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" host="ip-172-31-30-133" Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.468 [INFO][4138] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:22:58.548694 env[1688]: 2024-04-12 18:22:58.468 [INFO][4138] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.60.130/26] IPv6=[] ContainerID="e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" HandleID="k8s-pod-network.e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" Workload="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:22:58.549996 env[1688]: 2024-04-12 18:22:58.472 [INFO][4119] k8s.go 385: Populated endpoint ContainerID="e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" Namespace="calico-system" Pod="calico-kube-controllers-7c6696f5dc-z9rmb" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0", GenerateName:"calico-kube-controllers-7c6696f5dc-", Namespace:"calico-system", SelfLink:"", UID:"beaf4eff-3d47-41f0-ada6-96fa78b04ef4", ResourceVersion:"727", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7c6696f5dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"", Pod:"calico-kube-controllers-7c6696f5dc-z9rmb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.60.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid18c80e65e6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:22:58.549996 env[1688]: 2024-04-12 18:22:58.473 [INFO][4119] k8s.go 386: Calico CNI using IPs: [192.168.60.130/32] ContainerID="e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" Namespace="calico-system" Pod="calico-kube-controllers-7c6696f5dc-z9rmb" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:22:58.549996 env[1688]: 2024-04-12 18:22:58.473 [INFO][4119] dataplane_linux.go 68: Setting the host side veth name to calid18c80e65e6 ContainerID="e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" Namespace="calico-system" Pod="calico-kube-controllers-7c6696f5dc-z9rmb" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:22:58.549996 env[1688]: 2024-04-12 18:22:58.487 [INFO][4119] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" Namespace="calico-system" Pod="calico-kube-controllers-7c6696f5dc-z9rmb" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:22:58.549996 env[1688]: 2024-04-12 18:22:58.489 [INFO][4119] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" Namespace="calico-system" Pod="calico-kube-controllers-7c6696f5dc-z9rmb" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0", GenerateName:"calico-kube-controllers-7c6696f5dc-", Namespace:"calico-system", SelfLink:"", UID:"beaf4eff-3d47-41f0-ada6-96fa78b04ef4", ResourceVersion:"727", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7c6696f5dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12", Pod:"calico-kube-controllers-7c6696f5dc-z9rmb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.60.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid18c80e65e6", MAC:"2a:f8:7b:3d:6c:2c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:22:58.549996 env[1688]: 2024-04-12 18:22:58.544 [INFO][4119] k8s.go 498: Wrote updated endpoint to datastore ContainerID="e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12" Namespace="calico-system" Pod="calico-kube-controllers-7c6696f5dc-z9rmb" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:22:58.592672 env[1688]: time="2024-04-12T18:22:58.592391861Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:22:58.592672 env[1688]: time="2024-04-12T18:22:58.592465062Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:22:58.592672 env[1688]: time="2024-04-12T18:22:58.592490346Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:22:58.593389 env[1688]: time="2024-04-12T18:22:58.592920368Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12 pid=4206 runtime=io.containerd.runc.v2 Apr 12 18:22:58.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.627000 audit: BPF prog-id=155 op=LOAD Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4165 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:58.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961626631656138613832653532363433313339653331343538353633 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4165 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:58.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961626631656138613832653532363433313339653331343538353633 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit: BPF prog-id=156 op=LOAD Apr 12 18:22:58.631000 audit[4179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4165 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:58.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961626631656138613832653532363433313339653331343538353633 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit: BPF prog-id=157 op=LOAD Apr 12 18:22:58.631000 audit[4179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4165 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:58.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961626631656138613832653532363433313339653331343538353633 Apr 12 18:22:58.631000 audit: BPF prog-id=157 op=UNLOAD Apr 12 18:22:58.631000 audit: BPF prog-id=156 op=UNLOAD Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:58.631000 audit: BPF prog-id=158 op=LOAD Apr 12 18:22:58.631000 audit[4179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4165 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:58.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961626631656138613832653532363433313339653331343538353633 Apr 12 18:22:58.651724 systemd[1]: Started cri-containerd-e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12.scope. Apr 12 18:22:58.668878 env[1688]: time="2024-04-12T18:22:58.668823542Z" level=info msg="StopPodSandbox for \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\"" Apr 12 18:22:58.670767 env[1688]: time="2024-04-12T18:22:58.670110775Z" level=info msg="StopPodSandbox for \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\"" Apr 12 18:22:58.792191 env[1688]: time="2024-04-12T18:22:58.792133181Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-68kq9,Uid:57867405-0bcd-40ab-85a4-c6c91b8c5414,Namespace:kube-system,Attempt:1,} returns sandbox id \"9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec\"" Apr 12 18:22:58.805722 env[1688]: time="2024-04-12T18:22:58.805650678Z" level=info msg="CreateContainer within sandbox \"9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Apr 12 18:22:58.836109 env[1688]: time="2024-04-12T18:22:58.836019575Z" level=info msg="CreateContainer within sandbox \"9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"0e56e3d2cefb759a69ce5e572b05ad70bb410fccb3c59541562c6d6526aedff5\"" Apr 12 18:22:58.837387 env[1688]: time="2024-04-12T18:22:58.837334889Z" level=info msg="StartContainer for \"0e56e3d2cefb759a69ce5e572b05ad70bb410fccb3c59541562c6d6526aedff5\"" Apr 12 18:22:58.943372 systemd[1]: Started cri-containerd-0e56e3d2cefb759a69ce5e572b05ad70bb410fccb3c59541562c6d6526aedff5.scope. Apr 12 18:22:58.978694 kubelet[2815]: I0412 18:22:58.968853 2815 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Apr 12 18:22:59.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.072000 audit: BPF prog-id=159 op=LOAD Apr 12 18:22:59.074000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.074000 audit[4288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4165 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:59.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065353665336432636566623735396136396365356535373262303561 Apr 12 18:22:59.075000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.075000 audit[4288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4165 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:59.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065353665336432636566623735396136396365356535373262303561 Apr 12 18:22:59.078000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.078000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.078000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.078000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.078000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.078000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.078000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.078000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.078000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.078000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.078000 audit: BPF prog-id=160 op=LOAD Apr 12 18:22:59.078000 audit[4288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4165 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:59.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065353665336432636566623735396136396365356535373262303561 Apr 12 18:22:59.079000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.079000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.079000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.079000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.079000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.079000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.079000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.079000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.079000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.079000 audit: BPF prog-id=161 op=LOAD Apr 12 18:22:59.079000 audit[4288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4165 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:59.079000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065353665336432636566623735396136396365356535373262303561 Apr 12 18:22:59.081000 audit: BPF prog-id=161 op=UNLOAD Apr 12 18:22:59.081000 audit: BPF prog-id=160 op=UNLOAD Apr 12 18:22:59.081000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.081000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.081000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.081000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.081000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.081000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.081000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.081000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.081000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.081000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.081000 audit: BPF prog-id=162 op=LOAD Apr 12 18:22:59.081000 audit[4288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4165 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:59.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065353665336432636566623735396136396365356535373262303561 Apr 12 18:22:59.177813 env[1688]: time="2024-04-12T18:22:59.177749249Z" level=info msg="StartContainer for \"0e56e3d2cefb759a69ce5e572b05ad70bb410fccb3c59541562c6d6526aedff5\" returns successfully" Apr 12 18:22:59.197000 audit[4334]: NETFILTER_CFG table=filter:101 family=2 entries=36 op=nft_register_chain pid=4334 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:22:59.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.206000 audit: BPF prog-id=163 op=LOAD Apr 12 18:22:59.210000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.210000 audit[4221]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bfb38 a2=10 a3=0 items=0 ppid=4206 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:59.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537643631323730386239633265303263343866666636336139363232 Apr 12 18:22:59.210000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.210000 audit[4221]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=4206 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:59.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537643631323730386239633265303263343866666636336139363232 Apr 12 18:22:59.222000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.222000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.222000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.222000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.222000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.222000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.222000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.222000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.222000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.222000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.222000 audit: BPF prog-id=164 op=LOAD Apr 12 18:22:59.222000 audit[4221]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=4206 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:59.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537643631323730386239633265303263343866666636336139363232 Apr 12 18:22:59.223000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.223000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.223000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.223000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.223000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.223000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.223000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.223000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.223000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.223000 audit: BPF prog-id=165 op=LOAD Apr 12 18:22:59.223000 audit[4221]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=4206 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:59.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537643631323730386239633265303263343866666636336139363232 Apr 12 18:22:59.225000 audit: BPF prog-id=165 op=UNLOAD Apr 12 18:22:59.225000 audit: BPF prog-id=164 op=UNLOAD Apr 12 18:22:59.225000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.225000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.225000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.225000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.225000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.225000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.225000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.225000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.225000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.225000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:22:59.225000 audit: BPF prog-id=166 op=LOAD Apr 12 18:22:59.225000 audit[4221]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=4206 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:59.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537643631323730386239633265303263343866666636336139363232 Apr 12 18:22:59.197000 audit[4334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20404 a0=3 a1=ffffdf6c0780 a2=0 a3=ffffadf36fa8 items=0 ppid=3875 pid=4334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:59.197000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:22:59.238424 env[1688]: 2024-04-12 18:22:58.947 [INFO][4253] k8s.go 585: Cleaning up netns ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:22:59.238424 env[1688]: 2024-04-12 18:22:58.957 [INFO][4253] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" iface="eth0" netns="/var/run/netns/cni-7ec75cc2-10fa-b670-c837-fc54502fb8d6" Apr 12 18:22:59.238424 env[1688]: 2024-04-12 18:22:58.958 [INFO][4253] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" iface="eth0" netns="/var/run/netns/cni-7ec75cc2-10fa-b670-c837-fc54502fb8d6" Apr 12 18:22:59.238424 env[1688]: 2024-04-12 18:22:58.959 [INFO][4253] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" iface="eth0" netns="/var/run/netns/cni-7ec75cc2-10fa-b670-c837-fc54502fb8d6" Apr 12 18:22:59.238424 env[1688]: 2024-04-12 18:22:58.963 [INFO][4253] k8s.go 592: Releasing IP address(es) ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:22:59.238424 env[1688]: 2024-04-12 18:22:58.963 [INFO][4253] utils.go 188: Calico CNI releasing IP address ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:22:59.238424 env[1688]: 2024-04-12 18:22:59.180 [INFO][4304] ipam_plugin.go 415: Releasing address using handleID ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" HandleID="k8s-pod-network.0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:22:59.238424 env[1688]: 2024-04-12 18:22:59.181 [INFO][4304] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:22:59.238424 env[1688]: 2024-04-12 18:22:59.181 [INFO][4304] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:22:59.238424 env[1688]: 2024-04-12 18:22:59.208 [WARNING][4304] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" HandleID="k8s-pod-network.0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:22:59.238424 env[1688]: 2024-04-12 18:22:59.208 [INFO][4304] ipam_plugin.go 443: Releasing address using workloadID ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" HandleID="k8s-pod-network.0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:22:59.238424 env[1688]: 2024-04-12 18:22:59.228 [INFO][4304] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:22:59.238424 env[1688]: 2024-04-12 18:22:59.235 [INFO][4253] k8s.go 598: Teardown processing complete. ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:22:59.243823 systemd[1]: run-netns-cni\x2d7ec75cc2\x2d10fa\x2db670\x2dc837\x2dfc54502fb8d6.mount: Deactivated successfully. Apr 12 18:22:59.245834 env[1688]: time="2024-04-12T18:22:59.245759746Z" level=info msg="TearDown network for sandbox \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\" successfully" Apr 12 18:22:59.246002 env[1688]: time="2024-04-12T18:22:59.245968823Z" level=info msg="StopPodSandbox for \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\" returns successfully" Apr 12 18:22:59.247321 env[1688]: time="2024-04-12T18:22:59.247144841Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-ql4pp,Uid:706c716c-c7f3-456d-9f19-89c02d8057ce,Namespace:kube-system,Attempt:1,}" Apr 12 18:22:59.325133 env[1688]: 2024-04-12 18:22:59.038 [INFO][4262] k8s.go 585: Cleaning up netns ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:22:59.325133 env[1688]: 2024-04-12 18:22:59.038 [INFO][4262] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" iface="eth0" netns="/var/run/netns/cni-3da564ab-ab69-c064-7393-5bf15e72168e" Apr 12 18:22:59.325133 env[1688]: 2024-04-12 18:22:59.038 [INFO][4262] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" iface="eth0" netns="/var/run/netns/cni-3da564ab-ab69-c064-7393-5bf15e72168e" Apr 12 18:22:59.325133 env[1688]: 2024-04-12 18:22:59.039 [INFO][4262] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" iface="eth0" netns="/var/run/netns/cni-3da564ab-ab69-c064-7393-5bf15e72168e" Apr 12 18:22:59.325133 env[1688]: 2024-04-12 18:22:59.039 [INFO][4262] k8s.go 592: Releasing IP address(es) ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:22:59.325133 env[1688]: 2024-04-12 18:22:59.039 [INFO][4262] utils.go 188: Calico CNI releasing IP address ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:22:59.325133 env[1688]: 2024-04-12 18:22:59.258 [INFO][4325] ipam_plugin.go 415: Releasing address using handleID ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" HandleID="k8s-pod-network.c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Workload="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:22:59.325133 env[1688]: 2024-04-12 18:22:59.260 [INFO][4325] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:22:59.325133 env[1688]: 2024-04-12 18:22:59.260 [INFO][4325] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:22:59.325133 env[1688]: 2024-04-12 18:22:59.314 [WARNING][4325] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" HandleID="k8s-pod-network.c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Workload="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:22:59.325133 env[1688]: 2024-04-12 18:22:59.314 [INFO][4325] ipam_plugin.go 443: Releasing address using workloadID ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" HandleID="k8s-pod-network.c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Workload="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:22:59.325133 env[1688]: 2024-04-12 18:22:59.320 [INFO][4325] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:22:59.325133 env[1688]: 2024-04-12 18:22:59.322 [INFO][4262] k8s.go 598: Teardown processing complete. ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:22:59.336686 env[1688]: time="2024-04-12T18:22:59.336606081Z" level=info msg="TearDown network for sandbox \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\" successfully" Apr 12 18:22:59.336936 env[1688]: time="2024-04-12T18:22:59.336899518Z" level=info msg="StopPodSandbox for \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\" returns successfully" Apr 12 18:22:59.338123 env[1688]: time="2024-04-12T18:22:59.338066140Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hb8c9,Uid:8c4bfb8a-7c26-460b-af4b-5242640fa2d2,Namespace:calico-system,Attempt:1,}" Apr 12 18:22:59.508000 audit[4389]: NETFILTER_CFG table=filter:102 family=2 entries=40 op=nft_register_chain pid=4389 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:22:59.508000 audit[4389]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21592 a0=3 a1=ffffcc936e30 a2=0 a3=ffff91d41fa8 items=0 ppid=3875 pid=4389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:22:59.508000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:22:59.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.30.133:22-139.178.89.65:55702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:22:59.799721 systemd[1]: Started sshd@7-172.31.30.133:22-139.178.89.65:55702.service. Apr 12 18:22:59.852819 systemd-networkd[1498]: cali755be393546: Link UP Apr 12 18:22:59.862375 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Apr 12 18:22:59.862615 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali755be393546: link becomes ready Apr 12 18:22:59.862863 systemd-networkd[1498]: cali755be393546: Gained carrier Apr 12 18:22:59.895003 env[1688]: time="2024-04-12T18:22:59.894949044Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7c6696f5dc-z9rmb,Uid:beaf4eff-3d47-41f0-ada6-96fa78b04ef4,Namespace:calico-system,Attempt:1,} returns sandbox id \"e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12\"" Apr 12 18:22:59.906333 env[1688]: time="2024-04-12T18:22:59.906264549Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.3\"" Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.397 [INFO][4353] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0 coredns-5d78c9869d- kube-system 706c716c-c7f3-456d-9f19-89c02d8057ce 743 0 2024-04-12 18:22:19 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-30-133 coredns-5d78c9869d-ql4pp eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali755be393546 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" Namespace="kube-system" Pod="coredns-5d78c9869d-ql4pp" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-" Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.397 [INFO][4353] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" Namespace="kube-system" Pod="coredns-5d78c9869d-ql4pp" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.509 [INFO][4384] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" HandleID="k8s-pod-network.dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.534 [INFO][4384] ipam_plugin.go 268: Auto assigning IP ContainerID="dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" HandleID="k8s-pod-network.dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400029a7f0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-30-133", "pod":"coredns-5d78c9869d-ql4pp", "timestamp":"2024-04-12 18:22:59.509005257 +0000 UTC"}, Hostname:"ip-172-31-30-133", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.534 [INFO][4384] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.534 [INFO][4384] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.535 [INFO][4384] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-133' Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.564 [INFO][4384] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" host="ip-172-31-30-133" Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.661 [INFO][4384] ipam.go 372: Looking up existing affinities for host host="ip-172-31-30-133" Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.740 [INFO][4384] ipam.go 489: Trying affinity for 192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.768 [INFO][4384] ipam.go 155: Attempting to load block cidr=192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.781 [INFO][4384] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.781 [INFO][4384] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.60.128/26 handle="k8s-pod-network.dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" host="ip-172-31-30-133" Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.804 [INFO][4384] ipam.go 1682: Creating new handle: k8s-pod-network.dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089 Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.822 [INFO][4384] ipam.go 1203: Writing block in order to claim IPs block=192.168.60.128/26 handle="k8s-pod-network.dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" host="ip-172-31-30-133" Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.843 [INFO][4384] ipam.go 1216: Successfully claimed IPs: [192.168.60.131/26] block=192.168.60.128/26 handle="k8s-pod-network.dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" host="ip-172-31-30-133" Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.843 [INFO][4384] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.60.131/26] handle="k8s-pod-network.dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" host="ip-172-31-30-133" Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.844 [INFO][4384] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:22:59.909669 env[1688]: 2024-04-12 18:22:59.844 [INFO][4384] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.60.131/26] IPv6=[] ContainerID="dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" HandleID="k8s-pod-network.dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:22:59.910903 env[1688]: 2024-04-12 18:22:59.847 [INFO][4353] k8s.go 385: Populated endpoint ContainerID="dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" Namespace="kube-system" Pod="coredns-5d78c9869d-ql4pp" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"706c716c-c7f3-456d-9f19-89c02d8057ce", ResourceVersion:"743", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"", Pod:"coredns-5d78c9869d-ql4pp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali755be393546", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:22:59.910903 env[1688]: 2024-04-12 18:22:59.847 [INFO][4353] k8s.go 386: Calico CNI using IPs: [192.168.60.131/32] ContainerID="dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" Namespace="kube-system" Pod="coredns-5d78c9869d-ql4pp" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:22:59.910903 env[1688]: 2024-04-12 18:22:59.847 [INFO][4353] dataplane_linux.go 68: Setting the host side veth name to cali755be393546 ContainerID="dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" Namespace="kube-system" Pod="coredns-5d78c9869d-ql4pp" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:22:59.910903 env[1688]: 2024-04-12 18:22:59.877 [INFO][4353] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" Namespace="kube-system" Pod="coredns-5d78c9869d-ql4pp" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:22:59.910903 env[1688]: 2024-04-12 18:22:59.878 [INFO][4353] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" Namespace="kube-system" Pod="coredns-5d78c9869d-ql4pp" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"706c716c-c7f3-456d-9f19-89c02d8057ce", ResourceVersion:"743", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089", Pod:"coredns-5d78c9869d-ql4pp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali755be393546", MAC:"ea:d6:b2:64:02:08", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:22:59.910903 env[1688]: 2024-04-12 18:22:59.906 [INFO][4353] k8s.go 498: Wrote updated endpoint to datastore ContainerID="dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089" Namespace="kube-system" Pod="coredns-5d78c9869d-ql4pp" WorkloadEndpoint="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:22:59.955067 systemd[1]: run-netns-cni\x2d3da564ab\x2dab69\x2dc064\x2d7393\x2d5bf15e72168e.mount: Deactivated successfully. Apr 12 18:22:59.964032 systemd-networkd[1498]: calid18c80e65e6: Gained IPv6LL Apr 12 18:22:59.990078 kubelet[2815]: I0412 18:22:59.989480 2815 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-68kq9" podStartSLOduration=40.98941773 podCreationTimestamp="2024-04-12 18:22:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:22:59.985951464 +0000 UTC m=+53.721557326" watchObservedRunningTime="2024-04-12 18:22:59.98941773 +0000 UTC m=+53.725023580" Apr 12 18:22:59.999658 env[1688]: time="2024-04-12T18:22:59.997399726Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:22:59.999658 env[1688]: time="2024-04-12T18:22:59.997479358Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:22:59.999658 env[1688]: time="2024-04-12T18:22:59.997542502Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:23:00.004160 env[1688]: time="2024-04-12T18:22:59.999914146Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089 pid=4434 runtime=io.containerd.runc.v2 Apr 12 18:23:00.024078 systemd-networkd[1498]: calif0ca4128ec3: Gained IPv6LL Apr 12 18:23:00.025000 audit[4411]: USER_ACCT pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:00.026184 sshd[4411]: Accepted publickey for core from 139.178.89.65 port 55702 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:00.031000 audit[4411]: CRED_ACQ pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:00.031000 audit[4411]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1324110 a2=3 a3=1 items=0 ppid=1 pid=4411 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.031000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:00.033604 sshd[4411]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:00.047401 systemd[1]: Started session-8.scope. Apr 12 18:23:00.048755 systemd-logind[1680]: New session 8 of user core. Apr 12 18:23:00.064000 audit[4411]: USER_START pid=4411 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:00.067000 audit[4446]: CRED_ACQ pid=4446 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:00.071445 systemd-networkd[1498]: cali5d9ab163743: Link UP Apr 12 18:23:00.079809 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5d9ab163743: link becomes ready Apr 12 18:23:00.079406 systemd-networkd[1498]: cali5d9ab163743: Gained carrier Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.478 [INFO][4370] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0 csi-node-driver- calico-system 8c4bfb8a-7c26-460b-af4b-5242640fa2d2 745 0 2024-04-12 18:22:28 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:54c68f759 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ip-172-31-30-133 csi-node-driver-hb8c9 eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali5d9ab163743 [] []}} ContainerID="913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" Namespace="calico-system" Pod="csi-node-driver-hb8c9" WorkloadEndpoint="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-" Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.479 [INFO][4370] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" Namespace="calico-system" Pod="csi-node-driver-hb8c9" WorkloadEndpoint="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.566 [INFO][4392] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" HandleID="k8s-pod-network.913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" Workload="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.658 [INFO][4392] ipam_plugin.go 268: Auto assigning IP ContainerID="913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" HandleID="k8s-pod-network.913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" Workload="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002f7130), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-30-133", "pod":"csi-node-driver-hb8c9", "timestamp":"2024-04-12 18:22:59.566005483 +0000 UTC"}, Hostname:"ip-172-31-30-133", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.658 [INFO][4392] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.843 [INFO][4392] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.843 [INFO][4392] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-133' Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.870 [INFO][4392] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" host="ip-172-31-30-133" Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.891 [INFO][4392] ipam.go 372: Looking up existing affinities for host host="ip-172-31-30-133" Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.913 [INFO][4392] ipam.go 489: Trying affinity for 192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.920 [INFO][4392] ipam.go 155: Attempting to load block cidr=192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.940 [INFO][4392] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.940 [INFO][4392] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.60.128/26 handle="k8s-pod-network.913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" host="ip-172-31-30-133" Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.968 [INFO][4392] ipam.go 1682: Creating new handle: k8s-pod-network.913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:22:59.982 [INFO][4392] ipam.go 1203: Writing block in order to claim IPs block=192.168.60.128/26 handle="k8s-pod-network.913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" host="ip-172-31-30-133" Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:23:00.012 [INFO][4392] ipam.go 1216: Successfully claimed IPs: [192.168.60.132/26] block=192.168.60.128/26 handle="k8s-pod-network.913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" host="ip-172-31-30-133" Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:23:00.012 [INFO][4392] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.60.132/26] handle="k8s-pod-network.913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" host="ip-172-31-30-133" Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:23:00.013 [INFO][4392] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:23:00.124140 env[1688]: 2024-04-12 18:23:00.013 [INFO][4392] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.60.132/26] IPv6=[] ContainerID="913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" HandleID="k8s-pod-network.913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" Workload="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:23:00.125401 env[1688]: 2024-04-12 18:23:00.057 [INFO][4370] k8s.go 385: Populated endpoint ContainerID="913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" Namespace="calico-system" Pod="csi-node-driver-hb8c9" WorkloadEndpoint="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8c4bfb8a-7c26-460b-af4b-5242640fa2d2", ResourceVersion:"745", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"54c68f759", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"", Pod:"csi-node-driver-hb8c9", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.60.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali5d9ab163743", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:23:00.125401 env[1688]: 2024-04-12 18:23:00.060 [INFO][4370] k8s.go 386: Calico CNI using IPs: [192.168.60.132/32] ContainerID="913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" Namespace="calico-system" Pod="csi-node-driver-hb8c9" WorkloadEndpoint="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:23:00.125401 env[1688]: 2024-04-12 18:23:00.061 [INFO][4370] dataplane_linux.go 68: Setting the host side veth name to cali5d9ab163743 ContainerID="913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" Namespace="calico-system" Pod="csi-node-driver-hb8c9" WorkloadEndpoint="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:23:00.125401 env[1688]: 2024-04-12 18:23:00.092 [INFO][4370] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" Namespace="calico-system" Pod="csi-node-driver-hb8c9" WorkloadEndpoint="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:23:00.125401 env[1688]: 2024-04-12 18:23:00.101 [INFO][4370] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" Namespace="calico-system" Pod="csi-node-driver-hb8c9" WorkloadEndpoint="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8c4bfb8a-7c26-460b-af4b-5242640fa2d2", ResourceVersion:"745", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"54c68f759", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb", Pod:"csi-node-driver-hb8c9", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.60.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali5d9ab163743", MAC:"92:ff:d2:3b:6f:d2", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:23:00.125401 env[1688]: 2024-04-12 18:23:00.120 [INFO][4370] k8s.go 498: Wrote updated endpoint to datastore ContainerID="913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb" Namespace="calico-system" Pod="csi-node-driver-hb8c9" WorkloadEndpoint="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:23:00.154279 systemd[1]: Started cri-containerd-dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089.scope. Apr 12 18:23:00.189652 systemd[1]: run-containerd-runc-k8s.io-dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089-runc.gsh5bs.mount: Deactivated successfully. Apr 12 18:23:00.212729 env[1688]: time="2024-04-12T18:23:00.212566021Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:23:00.213018 env[1688]: time="2024-04-12T18:23:00.212880206Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:23:00.213164 env[1688]: time="2024-04-12T18:23:00.213066699Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:23:00.214881 env[1688]: time="2024-04-12T18:23:00.213944204Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb pid=4482 runtime=io.containerd.runc.v2 Apr 12 18:23:00.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.239000 audit: BPF prog-id=167 op=LOAD Apr 12 18:23:00.241000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.241000 audit[4445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4434 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464613935393836633435393536613530343330656231656464333166 Apr 12 18:23:00.241000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.241000 audit[4445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4434 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464613935393836633435393536613530343330656231656464333166 Apr 12 18:23:00.241000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.241000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.241000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.241000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.241000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.241000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.241000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.241000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.241000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.241000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.241000 audit: BPF prog-id=168 op=LOAD Apr 12 18:23:00.241000 audit[4445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4434 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464613935393836633435393536613530343330656231656464333166 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit: BPF prog-id=169 op=LOAD Apr 12 18:23:00.242000 audit[4445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4434 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464613935393836633435393536613530343330656231656464333166 Apr 12 18:23:00.242000 audit: BPF prog-id=169 op=UNLOAD Apr 12 18:23:00.242000 audit: BPF prog-id=168 op=UNLOAD Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.242000 audit: BPF prog-id=170 op=LOAD Apr 12 18:23:00.242000 audit[4445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4434 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464613935393836633435393536613530343330656231656464333166 Apr 12 18:23:00.260000 audit[4509]: NETFILTER_CFG table=filter:103 family=2 entries=11 op=nft_register_rule pid=4509 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:00.260000 audit[4509]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=fffff16d0410 a2=0 a3=1 items=0 ppid=2954 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.260000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:00.265670 systemd[1]: Started cri-containerd-913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb.scope. Apr 12 18:23:00.270000 audit[4509]: NETFILTER_CFG table=nat:104 family=2 entries=35 op=nft_register_chain pid=4509 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:00.270000 audit[4509]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=fffff16d0410 a2=0 a3=1 items=0 ppid=2954 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.270000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:00.372653 env[1688]: time="2024-04-12T18:23:00.369062998Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-ql4pp,Uid:706c716c-c7f3-456d-9f19-89c02d8057ce,Namespace:kube-system,Attempt:1,} returns sandbox id \"dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089\"" Apr 12 18:23:00.378819 env[1688]: time="2024-04-12T18:23:00.378745647Z" level=info msg="CreateContainer within sandbox \"dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Apr 12 18:23:00.408125 env[1688]: time="2024-04-12T18:23:00.408047289Z" level=info msg="CreateContainer within sandbox \"dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"596fcb5a81e2db3af3ff1cc147cb2b55bf0d01567fc437406f08bf0eebcf5394\"" Apr 12 18:23:00.409176 env[1688]: time="2024-04-12T18:23:00.409125387Z" level=info msg="StartContainer for \"596fcb5a81e2db3af3ff1cc147cb2b55bf0d01567fc437406f08bf0eebcf5394\"" Apr 12 18:23:00.410000 audit[4528]: NETFILTER_CFG table=filter:105 family=2 entries=8 op=nft_register_rule pid=4528 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:00.410000 audit[4528]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=fffff75e4370 a2=0 a3=1 items=0 ppid=2954 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.410000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:00.412000 audit[4528]: NETFILTER_CFG table=nat:106 family=2 entries=20 op=nft_register_rule pid=4528 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:00.412000 audit[4528]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffff75e4370 a2=0 a3=1 items=0 ppid=2954 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.412000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:00.483773 systemd[1]: Started cri-containerd-596fcb5a81e2db3af3ff1cc147cb2b55bf0d01567fc437406f08bf0eebcf5394.scope. Apr 12 18:23:00.495000 audit[4529]: NETFILTER_CFG table=filter:107 family=2 entries=34 op=nft_register_chain pid=4529 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:23:00.495000 audit[4529]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18220 a0=3 a1=fffff069e5f0 a2=0 a3=ffffb1f57fa8 items=0 ppid=3875 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.495000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:23:00.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.497000 audit: BPF prog-id=171 op=LOAD Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4482 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931336231393665623238323064623939613835316536353636666237 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4482 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931336231393665623238323064623939613835316536353636666237 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit: BPF prog-id=172 op=LOAD Apr 12 18:23:00.499000 audit[4502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4482 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931336231393665623238323064623939613835316536353636666237 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit: BPF prog-id=173 op=LOAD Apr 12 18:23:00.499000 audit[4502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4482 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931336231393665623238323064623939613835316536353636666237 Apr 12 18:23:00.499000 audit: BPF prog-id=173 op=UNLOAD Apr 12 18:23:00.499000 audit: BPF prog-id=172 op=UNLOAD Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.499000 audit: BPF prog-id=174 op=LOAD Apr 12 18:23:00.499000 audit[4502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4482 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931336231393665623238323064623939613835316536353636666237 Apr 12 18:23:00.547654 sshd[4411]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:00.549000 audit[4411]: USER_END pid=4411 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:00.549000 audit[4411]: CRED_DISP pid=4411 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:00.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.30.133:22-139.178.89.65:55702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:00.553896 systemd[1]: sshd@7-172.31.30.133:22-139.178.89.65:55702.service: Deactivated successfully. Apr 12 18:23:00.555210 systemd[1]: session-8.scope: Deactivated successfully. Apr 12 18:23:00.556862 systemd-logind[1680]: Session 8 logged out. Waiting for processes to exit. Apr 12 18:23:00.561602 systemd-logind[1680]: Removed session 8. Apr 12 18:23:00.581907 env[1688]: time="2024-04-12T18:23:00.581780849Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hb8c9,Uid:8c4bfb8a-7c26-460b-af4b-5242640fa2d2,Namespace:calico-system,Attempt:1,} returns sandbox id \"913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb\"" Apr 12 18:23:00.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.597000 audit: BPF prog-id=175 op=LOAD Apr 12 18:23:00.598000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.598000 audit[4537]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4434 pid=4537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.598000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539366663623561383165326462336166336666316363313437636232 Apr 12 18:23:00.599000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.599000 audit[4537]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4434 pid=4537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539366663623561383165326462336166336666316363313437636232 Apr 12 18:23:00.603000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.603000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.603000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.603000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.603000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.603000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.603000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.603000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.603000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.603000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.603000 audit: BPF prog-id=176 op=LOAD Apr 12 18:23:00.603000 audit[4537]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4434 pid=4537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539366663623561383165326462336166336666316363313437636232 Apr 12 18:23:00.604000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.604000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.604000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.604000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.604000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.604000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.604000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.604000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.604000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.604000 audit: BPF prog-id=177 op=LOAD Apr 12 18:23:00.604000 audit[4537]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4434 pid=4537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539366663623561383165326462336166336666316363313437636232 Apr 12 18:23:00.605000 audit: BPF prog-id=177 op=UNLOAD Apr 12 18:23:00.607000 audit: BPF prog-id=176 op=UNLOAD Apr 12 18:23:00.607000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.607000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.607000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.607000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.607000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.607000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.607000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.607000 audit[4537]: AVC avc: denied { perfmon } for pid=4537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.607000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.607000 audit[4537]: AVC avc: denied { bpf } for pid=4537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:00.607000 audit: BPF prog-id=178 op=LOAD Apr 12 18:23:00.607000 audit[4537]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4434 pid=4537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539366663623561383165326462336166336666316363313437636232 Apr 12 18:23:00.720561 env[1688]: time="2024-04-12T18:23:00.719655164Z" level=info msg="StartContainer for \"596fcb5a81e2db3af3ff1cc147cb2b55bf0d01567fc437406f08bf0eebcf5394\" returns successfully" Apr 12 18:23:00.746000 audit[4575]: NETFILTER_CFG table=filter:108 family=2 entries=42 op=nft_register_chain pid=4575 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:23:00.746000 audit[4575]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21016 a0=3 a1=ffffe315c5d0 a2=0 a3=ffffb33dafa8 items=0 ppid=3875 pid=4575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:00.746000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:23:00.787000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:00.787000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001b7eb40 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:23:00.787000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:23:00.787000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:00.787000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bb1410 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:23:00.787000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:23:01.034973 kubelet[2815]: I0412 18:23:01.034926 2815 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-ql4pp" podStartSLOduration=42.034870924 podCreationTimestamp="2024-04-12 18:22:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:23:01.033638852 +0000 UTC m=+54.769244690" watchObservedRunningTime="2024-04-12 18:23:01.034870924 +0000 UTC m=+54.770476738" Apr 12 18:23:01.239825 systemd-networkd[1498]: cali755be393546: Gained IPv6LL Apr 12 18:23:01.470000 audit[4603]: NETFILTER_CFG table=filter:109 family=2 entries=8 op=nft_register_rule pid=4603 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:01.473289 kernel: kauditd_printk_skb: 478 callbacks suppressed Apr 12 18:23:01.473466 kernel: audit: type=1325 audit(1712946181.470:1328): table=filter:109 family=2 entries=8 op=nft_register_rule pid=4603 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:01.470000 audit[4603]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=fffff6597440 a2=0 a3=1 items=0 ppid=2954 pid=4603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:01.470000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:01.503295 kernel: audit: type=1300 audit(1712946181.470:1328): arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=fffff6597440 a2=0 a3=1 items=0 ppid=2954 pid=4603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:01.503454 kernel: audit: type=1327 audit(1712946181.470:1328): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:01.518000 audit[4603]: NETFILTER_CFG table=nat:110 family=2 entries=56 op=nft_register_chain pid=4603 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:01.518000 audit[4603]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=fffff6597440 a2=0 a3=1 items=0 ppid=2954 pid=4603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:01.537962 kernel: audit: type=1325 audit(1712946181.518:1329): table=nat:110 family=2 entries=56 op=nft_register_chain pid=4603 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:01.538084 kernel: audit: type=1300 audit(1712946181.518:1329): arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=fffff6597440 a2=0 a3=1 items=0 ppid=2954 pid=4603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:01.518000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:01.546861 kernel: audit: type=1327 audit(1712946181.518:1329): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:01.815791 systemd-networkd[1498]: cali5d9ab163743: Gained IPv6LL Apr 12 18:23:02.307000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:02.319000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:02.336086 kernel: audit: type=1400 audit(1712946182.307:1330): avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:02.336248 kernel: audit: type=1400 audit(1712946182.319:1331): avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:02.319000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400e733b30 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:23:02.356962 kernel: audit: type=1300 audit(1712946182.319:1331): arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400e733b30 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:23:02.319000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:23:02.377781 kernel: audit: type=1327 audit(1712946182.319:1331): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:23:02.335000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:02.335000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=400e733ce0 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:23:02.335000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:23:02.307000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=67 a1=400e733aa0 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:23:02.307000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:23:02.338000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:02.338000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=67 a1=400e869640 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:23:02.338000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:23:02.348000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:02.348000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=67 a1=400e60ac00 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:23:02.348000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:23:02.504000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:02.504000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=67 a1=400f7f0a80 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:23:02.504000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:23:03.165381 env[1688]: time="2024-04-12T18:23:03.165320394Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:23:03.171688 env[1688]: time="2024-04-12T18:23:03.171622718Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d4c779f6e10281f74093e9334a770d51a544286816327704e1fcfd64ea509fb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:23:03.176779 env[1688]: time="2024-04-12T18:23:03.176716897Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:23:03.181431 env[1688]: time="2024-04-12T18:23:03.181375977Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:c74026de594a0e40b9aa63b33f41fa42fb311e35d65a10dfb642293292368c51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:23:03.184057 env[1688]: time="2024-04-12T18:23:03.182996720Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.3\" returns image reference \"sha256:7d4c779f6e10281f74093e9334a770d51a544286816327704e1fcfd64ea509fb\"" Apr 12 18:23:03.185132 env[1688]: time="2024-04-12T18:23:03.185082274Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.3\"" Apr 12 18:23:03.217763 env[1688]: time="2024-04-12T18:23:03.217706419Z" level=info msg="CreateContainer within sandbox \"e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Apr 12 18:23:03.246802 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3528692687.mount: Deactivated successfully. Apr 12 18:23:03.254445 env[1688]: time="2024-04-12T18:23:03.254354900Z" level=info msg="CreateContainer within sandbox \"e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"15046b11121b07613b3b0dcf0661231b987ae5c0a4c3a3522cd1ee3809f2ec79\"" Apr 12 18:23:03.255543 env[1688]: time="2024-04-12T18:23:03.255470883Z" level=info msg="StartContainer for \"15046b11121b07613b3b0dcf0661231b987ae5c0a4c3a3522cd1ee3809f2ec79\"" Apr 12 18:23:03.321741 systemd[1]: Started cri-containerd-15046b11121b07613b3b0dcf0661231b987ae5c0a4c3a3522cd1ee3809f2ec79.scope. Apr 12 18:23:03.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.385000 audit: BPF prog-id=179 op=LOAD Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4206 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:03.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135303436623131313231623037363133623362306463663036363132 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4206 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:03.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135303436623131313231623037363133623362306463663036363132 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit: BPF prog-id=180 op=LOAD Apr 12 18:23:03.387000 audit[4617]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4206 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:03.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135303436623131313231623037363133623362306463663036363132 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit: BPF prog-id=181 op=LOAD Apr 12 18:23:03.387000 audit[4617]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4206 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:03.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135303436623131313231623037363133623362306463663036363132 Apr 12 18:23:03.387000 audit: BPF prog-id=181 op=UNLOAD Apr 12 18:23:03.387000 audit: BPF prog-id=180 op=UNLOAD Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:03.387000 audit: BPF prog-id=182 op=LOAD Apr 12 18:23:03.387000 audit[4617]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4206 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:03.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135303436623131313231623037363133623362306463663036363132 Apr 12 18:23:03.449986 env[1688]: time="2024-04-12T18:23:03.449830559Z" level=info msg="StartContainer for \"15046b11121b07613b3b0dcf0661231b987ae5c0a4c3a3522cd1ee3809f2ec79\" returns successfully" Apr 12 18:23:04.041854 kubelet[2815]: I0412 18:23:04.041287 2815 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7c6696f5dc-z9rmb" podStartSLOduration=32.760096098 podCreationTimestamp="2024-04-12 18:22:28 +0000 UTC" firstStartedPulling="2024-04-12 18:22:59.903708212 +0000 UTC m=+53.639314026" lastFinishedPulling="2024-04-12 18:23:03.184843461 +0000 UTC m=+56.920449275" observedRunningTime="2024-04-12 18:23:04.041048238 +0000 UTC m=+57.776654052" watchObservedRunningTime="2024-04-12 18:23:04.041231347 +0000 UTC m=+57.776837173" Apr 12 18:23:05.408111 env[1688]: time="2024-04-12T18:23:05.408024463Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:23:05.413204 env[1688]: time="2024-04-12T18:23:05.413120363Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cb04debcdc824380d7f126f1c68f1232b1df46df89ee213e1e22c917392546db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:23:05.417878 env[1688]: time="2024-04-12T18:23:05.417803063Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:23:05.422055 env[1688]: time="2024-04-12T18:23:05.421970311Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e6e9be3e67df7388eae74d419fff785fdb35b0c3456e3d27a0251c7bdb55f0fd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:23:05.424449 env[1688]: time="2024-04-12T18:23:05.423335634Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.3\" returns image reference \"sha256:cb04debcdc824380d7f126f1c68f1232b1df46df89ee213e1e22c917392546db\"" Apr 12 18:23:05.428681 env[1688]: time="2024-04-12T18:23:05.428607851Z" level=info msg="CreateContainer within sandbox \"913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Apr 12 18:23:05.471782 env[1688]: time="2024-04-12T18:23:05.471679316Z" level=info msg="CreateContainer within sandbox \"913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"4710828058ba4e91a40150d5016335a80f9611e4eea7b9d3f1d4ff4c4d0fdb0d\"" Apr 12 18:23:05.472917 env[1688]: time="2024-04-12T18:23:05.472854701Z" level=info msg="StartContainer for \"4710828058ba4e91a40150d5016335a80f9611e4eea7b9d3f1d4ff4c4d0fdb0d\"" Apr 12 18:23:05.475451 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount247757280.mount: Deactivated successfully. Apr 12 18:23:05.534168 systemd[1]: Started cri-containerd-4710828058ba4e91a40150d5016335a80f9611e4eea7b9d3f1d4ff4c4d0fdb0d.scope. Apr 12 18:23:05.583728 systemd[1]: Started sshd@8-172.31.30.133:22-139.178.89.65:55710.service. Apr 12 18:23:05.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.30.133:22-139.178.89.65:55710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:05.642000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.642000 audit[4671]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4482 pid=4671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:05.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437313038323830353862613465393161343031353064353031363333 Apr 12 18:23:05.642000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.642000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.642000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.642000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.642000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.642000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.642000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.642000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.642000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.642000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.642000 audit: BPF prog-id=183 op=LOAD Apr 12 18:23:05.642000 audit[4671]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4482 pid=4671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:05.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437313038323830353862613465393161343031353064353031363333 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit: BPF prog-id=184 op=LOAD Apr 12 18:23:05.643000 audit[4671]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4482 pid=4671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:05.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437313038323830353862613465393161343031353064353031363333 Apr 12 18:23:05.643000 audit: BPF prog-id=184 op=UNLOAD Apr 12 18:23:05.643000 audit: BPF prog-id=183 op=UNLOAD Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { perfmon } for pid=4671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit[4671]: AVC avc: denied { bpf } for pid=4671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:05.643000 audit: BPF prog-id=185 op=LOAD Apr 12 18:23:05.643000 audit[4671]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4482 pid=4671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:05.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437313038323830353862613465393161343031353064353031363333 Apr 12 18:23:05.697255 env[1688]: time="2024-04-12T18:23:05.690848449Z" level=info msg="StartContainer for \"4710828058ba4e91a40150d5016335a80f9611e4eea7b9d3f1d4ff4c4d0fdb0d\" returns successfully" Apr 12 18:23:05.699802 env[1688]: time="2024-04-12T18:23:05.699745918Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.3\"" Apr 12 18:23:05.768000 audit[4682]: USER_ACCT pid=4682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:05.768853 sshd[4682]: Accepted publickey for core from 139.178.89.65 port 55710 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:05.770000 audit[4682]: CRED_ACQ pid=4682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:05.770000 audit[4682]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8a754a0 a2=3 a3=1 items=0 ppid=1 pid=4682 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:05.770000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:05.771993 sshd[4682]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:05.783866 systemd-logind[1680]: New session 9 of user core. Apr 12 18:23:05.783943 systemd[1]: Started session-9.scope. Apr 12 18:23:05.800000 audit[4682]: USER_START pid=4682 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:05.803000 audit[4702]: CRED_ACQ pid=4702 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:05.822000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:05.822000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ccf6a0 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:23:05.822000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:23:05.837000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:05.838000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:05.838000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000edcfc0 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:23:05.837000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ccf700 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:23:05.838000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:23:05.839000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:23:05.839000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000ccf820 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:23:05.839000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:23:05.837000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:23:06.149637 sshd[4682]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:06.152000 audit[4682]: USER_END pid=4682 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:06.152000 audit[4682]: CRED_DISP pid=4682 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:06.156588 systemd-logind[1680]: Session 9 logged out. Waiting for processes to exit. Apr 12 18:23:06.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.30.133:22-139.178.89.65:55710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:06.157162 systemd[1]: session-9.scope: Deactivated successfully. Apr 12 18:23:06.158481 systemd[1]: sshd@8-172.31.30.133:22-139.178.89.65:55710.service: Deactivated successfully. Apr 12 18:23:06.163220 systemd-logind[1680]: Removed session 9. Apr 12 18:23:06.460594 systemd[1]: run-containerd-runc-k8s.io-4710828058ba4e91a40150d5016335a80f9611e4eea7b9d3f1d4ff4c4d0fdb0d-runc.X0kKwf.mount: Deactivated successfully. Apr 12 18:23:06.538027 env[1688]: time="2024-04-12T18:23:06.537912367Z" level=info msg="StopPodSandbox for \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\"" Apr 12 18:23:06.720795 env[1688]: 2024-04-12 18:23:06.638 [WARNING][4732] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0", GenerateName:"calico-kube-controllers-7c6696f5dc-", Namespace:"calico-system", SelfLink:"", UID:"beaf4eff-3d47-41f0-ada6-96fa78b04ef4", ResourceVersion:"827", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7c6696f5dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12", Pod:"calico-kube-controllers-7c6696f5dc-z9rmb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.60.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid18c80e65e6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:23:06.720795 env[1688]: 2024-04-12 18:23:06.639 [INFO][4732] k8s.go 585: Cleaning up netns ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:23:06.720795 env[1688]: 2024-04-12 18:23:06.639 [INFO][4732] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" iface="eth0" netns="" Apr 12 18:23:06.720795 env[1688]: 2024-04-12 18:23:06.639 [INFO][4732] k8s.go 592: Releasing IP address(es) ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:23:06.720795 env[1688]: 2024-04-12 18:23:06.639 [INFO][4732] utils.go 188: Calico CNI releasing IP address ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:23:06.720795 env[1688]: 2024-04-12 18:23:06.692 [INFO][4738] ipam_plugin.go 415: Releasing address using handleID ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" HandleID="k8s-pod-network.8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Workload="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:23:06.720795 env[1688]: 2024-04-12 18:23:06.692 [INFO][4738] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:23:06.720795 env[1688]: 2024-04-12 18:23:06.693 [INFO][4738] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:23:06.720795 env[1688]: 2024-04-12 18:23:06.709 [WARNING][4738] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" HandleID="k8s-pod-network.8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Workload="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:23:06.720795 env[1688]: 2024-04-12 18:23:06.709 [INFO][4738] ipam_plugin.go 443: Releasing address using workloadID ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" HandleID="k8s-pod-network.8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Workload="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:23:06.720795 env[1688]: 2024-04-12 18:23:06.714 [INFO][4738] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:23:06.720795 env[1688]: 2024-04-12 18:23:06.717 [INFO][4732] k8s.go 598: Teardown processing complete. ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:23:06.720795 env[1688]: time="2024-04-12T18:23:06.720657980Z" level=info msg="TearDown network for sandbox \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\" successfully" Apr 12 18:23:06.720795 env[1688]: time="2024-04-12T18:23:06.720708596Z" level=info msg="StopPodSandbox for \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\" returns successfully" Apr 12 18:23:06.722518 env[1688]: time="2024-04-12T18:23:06.722439946Z" level=info msg="RemovePodSandbox for \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\"" Apr 12 18:23:06.722773 env[1688]: time="2024-04-12T18:23:06.722701332Z" level=info msg="Forcibly stopping sandbox \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\"" Apr 12 18:23:06.976136 env[1688]: 2024-04-12 18:23:06.858 [WARNING][4759] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0", GenerateName:"calico-kube-controllers-7c6696f5dc-", Namespace:"calico-system", SelfLink:"", UID:"beaf4eff-3d47-41f0-ada6-96fa78b04ef4", ResourceVersion:"827", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7c6696f5dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"e7d612708b9c2e02c48fff63a962280bf3ac4ece9753530326defcc61a1e4f12", Pod:"calico-kube-controllers-7c6696f5dc-z9rmb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.60.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid18c80e65e6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:23:06.976136 env[1688]: 2024-04-12 18:23:06.859 [INFO][4759] k8s.go 585: Cleaning up netns ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:23:06.976136 env[1688]: 2024-04-12 18:23:06.859 [INFO][4759] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" iface="eth0" netns="" Apr 12 18:23:06.976136 env[1688]: 2024-04-12 18:23:06.859 [INFO][4759] k8s.go 592: Releasing IP address(es) ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:23:06.976136 env[1688]: 2024-04-12 18:23:06.859 [INFO][4759] utils.go 188: Calico CNI releasing IP address ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:23:06.976136 env[1688]: 2024-04-12 18:23:06.946 [INFO][4765] ipam_plugin.go 415: Releasing address using handleID ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" HandleID="k8s-pod-network.8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Workload="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:23:06.976136 env[1688]: 2024-04-12 18:23:06.946 [INFO][4765] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:23:06.976136 env[1688]: 2024-04-12 18:23:06.946 [INFO][4765] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:23:06.976136 env[1688]: 2024-04-12 18:23:06.964 [WARNING][4765] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" HandleID="k8s-pod-network.8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Workload="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:23:06.976136 env[1688]: 2024-04-12 18:23:06.964 [INFO][4765] ipam_plugin.go 443: Releasing address using workloadID ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" HandleID="k8s-pod-network.8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Workload="ip--172--31--30--133-k8s-calico--kube--controllers--7c6696f5dc--z9rmb-eth0" Apr 12 18:23:06.976136 env[1688]: 2024-04-12 18:23:06.968 [INFO][4765] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:23:06.976136 env[1688]: 2024-04-12 18:23:06.970 [INFO][4759] k8s.go 598: Teardown processing complete. ContainerID="8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18" Apr 12 18:23:06.978225 env[1688]: time="2024-04-12T18:23:06.976104278Z" level=info msg="TearDown network for sandbox \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\" successfully" Apr 12 18:23:06.984401 env[1688]: time="2024-04-12T18:23:06.984323312Z" level=info msg="RemovePodSandbox \"8f628c71be5011446c219e19d54f28b7d13b5ac5f7163ab7d31a6fccefe27c18\" returns successfully" Apr 12 18:23:06.985303 env[1688]: time="2024-04-12T18:23:06.985243240Z" level=info msg="StopPodSandbox for \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\"" Apr 12 18:23:07.286102 env[1688]: 2024-04-12 18:23:07.183 [WARNING][4786] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"57867405-0bcd-40ab-85a4-c6c91b8c5414", ResourceVersion:"780", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec", Pod:"coredns-5d78c9869d-68kq9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif0ca4128ec3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:23:07.286102 env[1688]: 2024-04-12 18:23:07.183 [INFO][4786] k8s.go 585: Cleaning up netns ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:23:07.286102 env[1688]: 2024-04-12 18:23:07.187 [INFO][4786] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" iface="eth0" netns="" Apr 12 18:23:07.286102 env[1688]: 2024-04-12 18:23:07.187 [INFO][4786] k8s.go 592: Releasing IP address(es) ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:23:07.286102 env[1688]: 2024-04-12 18:23:07.187 [INFO][4786] utils.go 188: Calico CNI releasing IP address ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:23:07.286102 env[1688]: 2024-04-12 18:23:07.258 [INFO][4797] ipam_plugin.go 415: Releasing address using handleID ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" HandleID="k8s-pod-network.b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:23:07.286102 env[1688]: 2024-04-12 18:23:07.260 [INFO][4797] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:23:07.286102 env[1688]: 2024-04-12 18:23:07.260 [INFO][4797] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:23:07.286102 env[1688]: 2024-04-12 18:23:07.276 [WARNING][4797] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" HandleID="k8s-pod-network.b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:23:07.286102 env[1688]: 2024-04-12 18:23:07.276 [INFO][4797] ipam_plugin.go 443: Releasing address using workloadID ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" HandleID="k8s-pod-network.b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:23:07.286102 env[1688]: 2024-04-12 18:23:07.280 [INFO][4797] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:23:07.286102 env[1688]: 2024-04-12 18:23:07.283 [INFO][4786] k8s.go 598: Teardown processing complete. ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:23:07.287343 env[1688]: time="2024-04-12T18:23:07.287289102Z" level=info msg="TearDown network for sandbox \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\" successfully" Apr 12 18:23:07.287479 env[1688]: time="2024-04-12T18:23:07.287445908Z" level=info msg="StopPodSandbox for \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\" returns successfully" Apr 12 18:23:07.288320 env[1688]: time="2024-04-12T18:23:07.288274323Z" level=info msg="RemovePodSandbox for \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\"" Apr 12 18:23:07.288576 env[1688]: time="2024-04-12T18:23:07.288486665Z" level=info msg="Forcibly stopping sandbox \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\"" Apr 12 18:23:07.485157 env[1688]: time="2024-04-12T18:23:07.480776787Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:23:07.486688 env[1688]: time="2024-04-12T18:23:07.486561017Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:13500f6d740693374c9b66f167a0c47c5ec1550366636a961a70a22bf3f42146,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:23:07.492067 env[1688]: time="2024-04-12T18:23:07.489871197Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:23:07.495547 env[1688]: time="2024-04-12T18:23:07.495447381Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:f3c7cf1e4b85038d77b3568a1103d3c5174b07bd4435b22a8891b167ef28a50a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:23:07.500776 env[1688]: time="2024-04-12T18:23:07.500293046Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.3\" returns image reference \"sha256:13500f6d740693374c9b66f167a0c47c5ec1550366636a961a70a22bf3f42146\"" Apr 12 18:23:07.509128 env[1688]: time="2024-04-12T18:23:07.509042837Z" level=info msg="CreateContainer within sandbox \"913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Apr 12 18:23:07.513722 env[1688]: 2024-04-12 18:23:07.406 [WARNING][4815] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"57867405-0bcd-40ab-85a4-c6c91b8c5414", ResourceVersion:"780", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"9abf1ea8a82e52643139e314585637cf1fb2e98e3b9ceadfbf49e82cc40272ec", Pod:"coredns-5d78c9869d-68kq9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif0ca4128ec3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:23:07.513722 env[1688]: 2024-04-12 18:23:07.408 [INFO][4815] k8s.go 585: Cleaning up netns ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:23:07.513722 env[1688]: 2024-04-12 18:23:07.408 [INFO][4815] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" iface="eth0" netns="" Apr 12 18:23:07.513722 env[1688]: 2024-04-12 18:23:07.408 [INFO][4815] k8s.go 592: Releasing IP address(es) ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:23:07.513722 env[1688]: 2024-04-12 18:23:07.408 [INFO][4815] utils.go 188: Calico CNI releasing IP address ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:23:07.513722 env[1688]: 2024-04-12 18:23:07.474 [INFO][4821] ipam_plugin.go 415: Releasing address using handleID ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" HandleID="k8s-pod-network.b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:23:07.513722 env[1688]: 2024-04-12 18:23:07.475 [INFO][4821] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:23:07.513722 env[1688]: 2024-04-12 18:23:07.475 [INFO][4821] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:23:07.513722 env[1688]: 2024-04-12 18:23:07.497 [WARNING][4821] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" HandleID="k8s-pod-network.b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:23:07.513722 env[1688]: 2024-04-12 18:23:07.497 [INFO][4821] ipam_plugin.go 443: Releasing address using workloadID ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" HandleID="k8s-pod-network.b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--68kq9-eth0" Apr 12 18:23:07.513722 env[1688]: 2024-04-12 18:23:07.505 [INFO][4821] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:23:07.513722 env[1688]: 2024-04-12 18:23:07.509 [INFO][4815] k8s.go 598: Teardown processing complete. ContainerID="b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55" Apr 12 18:23:07.514820 env[1688]: time="2024-04-12T18:23:07.514770606Z" level=info msg="TearDown network for sandbox \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\" successfully" Apr 12 18:23:07.524088 env[1688]: time="2024-04-12T18:23:07.523994749Z" level=info msg="RemovePodSandbox \"b32c12a5069d0f259e7efa00b3c42a6834ccf7d8b750784770519707a7133a55\" returns successfully" Apr 12 18:23:07.525002 env[1688]: time="2024-04-12T18:23:07.524938557Z" level=info msg="StopPodSandbox for \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\"" Apr 12 18:23:07.542159 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2981137717.mount: Deactivated successfully. Apr 12 18:23:07.550466 env[1688]: time="2024-04-12T18:23:07.550395334Z" level=info msg="CreateContainer within sandbox \"913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"5d27719f25bd25229677b3745143eb651863f5c2ab88114995b9e94de0e9feac\"" Apr 12 18:23:07.554662 env[1688]: time="2024-04-12T18:23:07.554274607Z" level=info msg="StartContainer for \"5d27719f25bd25229677b3745143eb651863f5c2ab88114995b9e94de0e9feac\"" Apr 12 18:23:07.627222 systemd[1]: run-containerd-runc-k8s.io-5d27719f25bd25229677b3745143eb651863f5c2ab88114995b9e94de0e9feac-runc.hAxKTC.mount: Deactivated successfully. Apr 12 18:23:07.635129 systemd[1]: Started cri-containerd-5d27719f25bd25229677b3745143eb651863f5c2ab88114995b9e94de0e9feac.scope. Apr 12 18:23:07.698000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.700816 kernel: kauditd_printk_skb: 137 callbacks suppressed Apr 12 18:23:07.700934 kernel: audit: type=1400 audit(1712946187.698:1373): avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.698000 audit[4852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4482 pid=4852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:07.719947 kernel: audit: type=1300 audit(1712946187.698:1373): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4482 pid=4852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:07.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564323737313966323562643235323239363737623337343531343365 Apr 12 18:23:07.731583 kernel: audit: type=1327 audit(1712946187.698:1373): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564323737313966323562643235323239363737623337343531343365 Apr 12 18:23:07.706000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.706000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.751117 kernel: audit: type=1400 audit(1712946187.706:1374): avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.751277 kernel: audit: type=1400 audit(1712946187.706:1374): avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.706000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.761582 kernel: audit: type=1400 audit(1712946187.706:1374): avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.706000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.769356 kernel: audit: type=1400 audit(1712946187.706:1374): avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.769571 kernel: audit: type=1400 audit(1712946187.706:1374): avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.706000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.706000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.785574 kernel: audit: type=1400 audit(1712946187.706:1374): avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.706000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.793596 kernel: audit: type=1400 audit(1712946187.706:1374): avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.706000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.706000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.706000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.706000 audit: BPF prog-id=186 op=LOAD Apr 12 18:23:07.706000 audit[4852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4482 pid=4852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:07.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564323737313966323562643235323239363737623337343531343365 Apr 12 18:23:07.707000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.707000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.707000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.707000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.707000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.707000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.707000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.707000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.707000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.707000 audit: BPF prog-id=187 op=LOAD Apr 12 18:23:07.707000 audit[4852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4482 pid=4852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:07.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564323737313966323562643235323239363737623337343531343365 Apr 12 18:23:07.719000 audit: BPF prog-id=187 op=UNLOAD Apr 12 18:23:07.719000 audit: BPF prog-id=186 op=UNLOAD Apr 12 18:23:07.719000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.719000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.719000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.719000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.719000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.719000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.719000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.719000 audit[4852]: AVC avc: denied { perfmon } for pid=4852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.719000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.719000 audit[4852]: AVC avc: denied { bpf } for pid=4852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:07.719000 audit: BPF prog-id=188 op=LOAD Apr 12 18:23:07.719000 audit[4852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4482 pid=4852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:07.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564323737313966323562643235323239363737623337343531343365 Apr 12 18:23:07.809027 env[1688]: time="2024-04-12T18:23:07.808948679Z" level=info msg="StartContainer for \"5d27719f25bd25229677b3745143eb651863f5c2ab88114995b9e94de0e9feac\" returns successfully" Apr 12 18:23:07.839291 env[1688]: 2024-04-12 18:23:07.682 [WARNING][4839] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"706c716c-c7f3-456d-9f19-89c02d8057ce", ResourceVersion:"798", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089", Pod:"coredns-5d78c9869d-ql4pp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali755be393546", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:23:07.839291 env[1688]: 2024-04-12 18:23:07.682 [INFO][4839] k8s.go 585: Cleaning up netns ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:23:07.839291 env[1688]: 2024-04-12 18:23:07.682 [INFO][4839] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" iface="eth0" netns="" Apr 12 18:23:07.839291 env[1688]: 2024-04-12 18:23:07.682 [INFO][4839] k8s.go 592: Releasing IP address(es) ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:23:07.839291 env[1688]: 2024-04-12 18:23:07.683 [INFO][4839] utils.go 188: Calico CNI releasing IP address ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:23:07.839291 env[1688]: 2024-04-12 18:23:07.791 [INFO][4868] ipam_plugin.go 415: Releasing address using handleID ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" HandleID="k8s-pod-network.0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:23:07.839291 env[1688]: 2024-04-12 18:23:07.801 [INFO][4868] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:23:07.839291 env[1688]: 2024-04-12 18:23:07.802 [INFO][4868] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:23:07.839291 env[1688]: 2024-04-12 18:23:07.825 [WARNING][4868] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" HandleID="k8s-pod-network.0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:23:07.839291 env[1688]: 2024-04-12 18:23:07.826 [INFO][4868] ipam_plugin.go 443: Releasing address using workloadID ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" HandleID="k8s-pod-network.0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:23:07.839291 env[1688]: 2024-04-12 18:23:07.833 [INFO][4868] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:23:07.839291 env[1688]: 2024-04-12 18:23:07.837 [INFO][4839] k8s.go 598: Teardown processing complete. ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:23:07.840468 env[1688]: time="2024-04-12T18:23:07.840395920Z" level=info msg="TearDown network for sandbox \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\" successfully" Apr 12 18:23:07.840664 env[1688]: time="2024-04-12T18:23:07.840625794Z" level=info msg="StopPodSandbox for \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\" returns successfully" Apr 12 18:23:07.842496 env[1688]: time="2024-04-12T18:23:07.842438841Z" level=info msg="RemovePodSandbox for \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\"" Apr 12 18:23:07.842496 env[1688]: time="2024-04-12T18:23:07.842521942Z" level=info msg="Forcibly stopping sandbox \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\"" Apr 12 18:23:07.993094 env[1688]: 2024-04-12 18:23:07.923 [WARNING][4898] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"706c716c-c7f3-456d-9f19-89c02d8057ce", ResourceVersion:"798", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"dda95986c45956a50430eb1edd31f360220dcc628c0abe638a05b4658fa93089", Pod:"coredns-5d78c9869d-ql4pp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali755be393546", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:23:07.993094 env[1688]: 2024-04-12 18:23:07.923 [INFO][4898] k8s.go 585: Cleaning up netns ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:23:07.993094 env[1688]: 2024-04-12 18:23:07.923 [INFO][4898] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" iface="eth0" netns="" Apr 12 18:23:07.993094 env[1688]: 2024-04-12 18:23:07.923 [INFO][4898] k8s.go 592: Releasing IP address(es) ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:23:07.993094 env[1688]: 2024-04-12 18:23:07.923 [INFO][4898] utils.go 188: Calico CNI releasing IP address ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:23:07.993094 env[1688]: 2024-04-12 18:23:07.967 [INFO][4906] ipam_plugin.go 415: Releasing address using handleID ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" HandleID="k8s-pod-network.0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:23:07.993094 env[1688]: 2024-04-12 18:23:07.967 [INFO][4906] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:23:07.993094 env[1688]: 2024-04-12 18:23:07.968 [INFO][4906] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:23:07.993094 env[1688]: 2024-04-12 18:23:07.982 [WARNING][4906] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" HandleID="k8s-pod-network.0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:23:07.993094 env[1688]: 2024-04-12 18:23:07.982 [INFO][4906] ipam_plugin.go 443: Releasing address using workloadID ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" HandleID="k8s-pod-network.0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Workload="ip--172--31--30--133-k8s-coredns--5d78c9869d--ql4pp-eth0" Apr 12 18:23:07.993094 env[1688]: 2024-04-12 18:23:07.986 [INFO][4906] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:23:07.993094 env[1688]: 2024-04-12 18:23:07.989 [INFO][4898] k8s.go 598: Teardown processing complete. ContainerID="0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d" Apr 12 18:23:07.994129 env[1688]: time="2024-04-12T18:23:07.993143809Z" level=info msg="TearDown network for sandbox \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\" successfully" Apr 12 18:23:07.999821 env[1688]: time="2024-04-12T18:23:07.999743865Z" level=info msg="RemovePodSandbox \"0b45257f7dedd9a4f41e9ac357ae20f6a94191b0941937ba627d199e68f5a32d\" returns successfully" Apr 12 18:23:08.003554 env[1688]: time="2024-04-12T18:23:08.000856287Z" level=info msg="StopPodSandbox for \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\"" Apr 12 18:23:08.208688 env[1688]: 2024-04-12 18:23:08.128 [WARNING][4925] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8c4bfb8a-7c26-460b-af4b-5242640fa2d2", ResourceVersion:"861", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"54c68f759", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb", Pod:"csi-node-driver-hb8c9", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.60.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali5d9ab163743", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:23:08.208688 env[1688]: 2024-04-12 18:23:08.129 [INFO][4925] k8s.go 585: Cleaning up netns ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:23:08.208688 env[1688]: 2024-04-12 18:23:08.129 [INFO][4925] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" iface="eth0" netns="" Apr 12 18:23:08.208688 env[1688]: 2024-04-12 18:23:08.129 [INFO][4925] k8s.go 592: Releasing IP address(es) ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:23:08.208688 env[1688]: 2024-04-12 18:23:08.129 [INFO][4925] utils.go 188: Calico CNI releasing IP address ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:23:08.208688 env[1688]: 2024-04-12 18:23:08.169 [INFO][4931] ipam_plugin.go 415: Releasing address using handleID ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" HandleID="k8s-pod-network.c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Workload="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:23:08.208688 env[1688]: 2024-04-12 18:23:08.170 [INFO][4931] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:23:08.208688 env[1688]: 2024-04-12 18:23:08.170 [INFO][4931] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:23:08.208688 env[1688]: 2024-04-12 18:23:08.192 [WARNING][4931] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" HandleID="k8s-pod-network.c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Workload="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:23:08.208688 env[1688]: 2024-04-12 18:23:08.192 [INFO][4931] ipam_plugin.go 443: Releasing address using workloadID ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" HandleID="k8s-pod-network.c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Workload="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:23:08.208688 env[1688]: 2024-04-12 18:23:08.196 [INFO][4931] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:23:08.208688 env[1688]: 2024-04-12 18:23:08.199 [INFO][4925] k8s.go 598: Teardown processing complete. ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:23:08.208688 env[1688]: time="2024-04-12T18:23:08.202887018Z" level=info msg="TearDown network for sandbox \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\" successfully" Apr 12 18:23:08.208688 env[1688]: time="2024-04-12T18:23:08.202936458Z" level=info msg="StopPodSandbox for \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\" returns successfully" Apr 12 18:23:08.208688 env[1688]: time="2024-04-12T18:23:08.203672101Z" level=info msg="RemovePodSandbox for \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\"" Apr 12 18:23:08.208688 env[1688]: time="2024-04-12T18:23:08.203737993Z" level=info msg="Forcibly stopping sandbox \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\"" Apr 12 18:23:08.381881 env[1688]: 2024-04-12 18:23:08.302 [WARNING][4950] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8c4bfb8a-7c26-460b-af4b-5242640fa2d2", ResourceVersion:"861", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 22, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"54c68f759", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"913b196eb2820db99a851e6566fb7a0ec6fc5bffab3a41829b5230329790f7bb", Pod:"csi-node-driver-hb8c9", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.60.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali5d9ab163743", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:23:08.381881 env[1688]: 2024-04-12 18:23:08.303 [INFO][4950] k8s.go 585: Cleaning up netns ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:23:08.381881 env[1688]: 2024-04-12 18:23:08.303 [INFO][4950] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" iface="eth0" netns="" Apr 12 18:23:08.381881 env[1688]: 2024-04-12 18:23:08.303 [INFO][4950] k8s.go 592: Releasing IP address(es) ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:23:08.381881 env[1688]: 2024-04-12 18:23:08.303 [INFO][4950] utils.go 188: Calico CNI releasing IP address ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:23:08.381881 env[1688]: 2024-04-12 18:23:08.346 [INFO][4956] ipam_plugin.go 415: Releasing address using handleID ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" HandleID="k8s-pod-network.c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Workload="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:23:08.381881 env[1688]: 2024-04-12 18:23:08.346 [INFO][4956] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:23:08.381881 env[1688]: 2024-04-12 18:23:08.346 [INFO][4956] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:23:08.381881 env[1688]: 2024-04-12 18:23:08.363 [WARNING][4956] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" HandleID="k8s-pod-network.c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Workload="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:23:08.381881 env[1688]: 2024-04-12 18:23:08.369 [INFO][4956] ipam_plugin.go 443: Releasing address using workloadID ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" HandleID="k8s-pod-network.c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Workload="ip--172--31--30--133-k8s-csi--node--driver--hb8c9-eth0" Apr 12 18:23:08.381881 env[1688]: 2024-04-12 18:23:08.374 [INFO][4956] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:23:08.381881 env[1688]: 2024-04-12 18:23:08.377 [INFO][4950] k8s.go 598: Teardown processing complete. ContainerID="c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34" Apr 12 18:23:08.383002 env[1688]: time="2024-04-12T18:23:08.381936548Z" level=info msg="TearDown network for sandbox \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\" successfully" Apr 12 18:23:08.388196 env[1688]: time="2024-04-12T18:23:08.388065866Z" level=info msg="RemovePodSandbox \"c5f9bc9ff588778a09c4faf417fd4d37229993d15a70e12ff0855973e5495a34\" returns successfully" Apr 12 18:23:08.802940 kubelet[2815]: I0412 18:23:08.802893 2815 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Apr 12 18:23:08.803672 kubelet[2815]: I0412 18:23:08.802953 2815 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Apr 12 18:23:11.181867 systemd[1]: Started sshd@9-172.31.30.133:22-139.178.89.65:60334.service. Apr 12 18:23:11.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.30.133:22-139.178.89.65:60334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:11.366000 audit[4965]: USER_ACCT pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:11.367189 sshd[4965]: Accepted publickey for core from 139.178.89.65 port 60334 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:11.368000 audit[4965]: CRED_ACQ pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:11.368000 audit[4965]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5371760 a2=3 a3=1 items=0 ppid=1 pid=4965 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:11.368000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:11.370730 sshd[4965]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:11.381656 systemd-logind[1680]: New session 10 of user core. Apr 12 18:23:11.381785 systemd[1]: Started session-10.scope. Apr 12 18:23:11.398000 audit[4965]: USER_START pid=4965 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:11.401000 audit[4967]: CRED_ACQ pid=4967 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:11.674156 sshd[4965]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:11.676000 audit[4965]: USER_END pid=4965 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:11.677000 audit[4965]: CRED_DISP pid=4965 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:11.680296 systemd[1]: session-10.scope: Deactivated successfully. Apr 12 18:23:11.682405 systemd-logind[1680]: Session 10 logged out. Waiting for processes to exit. Apr 12 18:23:11.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.30.133:22-139.178.89.65:60334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:11.683007 systemd[1]: sshd@9-172.31.30.133:22-139.178.89.65:60334.service: Deactivated successfully. Apr 12 18:23:11.687316 systemd-logind[1680]: Removed session 10. Apr 12 18:23:12.777823 systemd[1]: run-containerd-runc-k8s.io-15046b11121b07613b3b0dcf0661231b987ae5c0a4c3a3522cd1ee3809f2ec79-runc.Bk6XB1.mount: Deactivated successfully. Apr 12 18:23:16.705870 systemd[1]: Started sshd@10-172.31.30.133:22-139.178.89.65:60338.service. Apr 12 18:23:16.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.30.133:22-139.178.89.65:60338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:16.712540 kernel: kauditd_printk_skb: 44 callbacks suppressed Apr 12 18:23:16.712697 kernel: audit: type=1130 audit(1712946196.705:1388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.30.133:22-139.178.89.65:60338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:16.893000 audit[5005]: USER_ACCT pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:16.896152 sshd[5005]: Accepted publickey for core from 139.178.89.65 port 60338 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:16.905568 kernel: audit: type=1101 audit(1712946196.893:1389): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:16.907194 sshd[5005]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:16.904000 audit[5005]: CRED_ACQ pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:16.925950 kernel: audit: type=1103 audit(1712946196.904:1390): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:16.926090 kernel: audit: type=1006 audit(1712946196.905:1391): pid=5005 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Apr 12 18:23:16.905000 audit[5005]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc2791c0 a2=3 a3=1 items=0 ppid=1 pid=5005 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:16.937135 kernel: audit: type=1300 audit(1712946196.905:1391): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc2791c0 a2=3 a3=1 items=0 ppid=1 pid=5005 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:16.905000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:16.942178 kernel: audit: type=1327 audit(1712946196.905:1391): proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:16.946791 systemd-logind[1680]: New session 11 of user core. Apr 12 18:23:16.949153 systemd[1]: Started session-11.scope. Apr 12 18:23:16.962000 audit[5005]: USER_START pid=5005 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:16.975595 kernel: audit: type=1105 audit(1712946196.962:1392): pid=5005 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:16.975000 audit[5007]: CRED_ACQ pid=5007 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:16.986552 kernel: audit: type=1103 audit(1712946196.975:1393): pid=5007 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:17.305201 sshd[5005]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:17.306000 audit[5005]: USER_END pid=5005 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:17.318898 systemd[1]: sshd@10-172.31.30.133:22-139.178.89.65:60338.service: Deactivated successfully. Apr 12 18:23:17.320263 systemd[1]: session-11.scope: Deactivated successfully. Apr 12 18:23:17.322585 systemd-logind[1680]: Session 11 logged out. Waiting for processes to exit. Apr 12 18:23:17.324325 systemd-logind[1680]: Removed session 11. Apr 12 18:23:17.332934 systemd[1]: Started sshd@11-172.31.30.133:22-139.178.89.65:39288.service. Apr 12 18:23:17.306000 audit[5005]: CRED_DISP pid=5005 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:17.347118 kernel: audit: type=1106 audit(1712946197.306:1394): pid=5005 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:17.347252 kernel: audit: type=1104 audit(1712946197.306:1395): pid=5005 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:17.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.30.133:22-139.178.89.65:60338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:17.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.30.133:22-139.178.89.65:39288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:17.523000 audit[5019]: USER_ACCT pid=5019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:17.524428 sshd[5019]: Accepted publickey for core from 139.178.89.65 port 39288 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:17.526000 audit[5019]: CRED_ACQ pid=5019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:17.526000 audit[5019]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef9c7fc0 a2=3 a3=1 items=0 ppid=1 pid=5019 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:17.526000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:17.528372 sshd[5019]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:17.538199 systemd-logind[1680]: New session 12 of user core. Apr 12 18:23:17.539473 systemd[1]: Started session-12.scope. Apr 12 18:23:17.552000 audit[5019]: USER_START pid=5019 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:17.554000 audit[5025]: CRED_ACQ pid=5025 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:18.299541 sshd[5019]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:18.300000 audit[5019]: USER_END pid=5019 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:18.300000 audit[5019]: CRED_DISP pid=5019 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:18.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.30.133:22-139.178.89.65:39288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:18.304967 systemd-logind[1680]: Session 12 logged out. Waiting for processes to exit. Apr 12 18:23:18.305320 systemd[1]: sshd@11-172.31.30.133:22-139.178.89.65:39288.service: Deactivated successfully. Apr 12 18:23:18.306827 systemd[1]: session-12.scope: Deactivated successfully. Apr 12 18:23:18.310202 systemd-logind[1680]: Removed session 12. Apr 12 18:23:18.330895 systemd[1]: Started sshd@12-172.31.30.133:22-139.178.89.65:39300.service. Apr 12 18:23:18.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.30.133:22-139.178.89.65:39300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:18.521757 sshd[5033]: Accepted publickey for core from 139.178.89.65 port 39300 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:18.520000 audit[5033]: USER_ACCT pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:18.522000 audit[5033]: CRED_ACQ pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:18.522000 audit[5033]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9c39520 a2=3 a3=1 items=0 ppid=1 pid=5033 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:18.522000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:18.525001 sshd[5033]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:18.534886 systemd-logind[1680]: New session 13 of user core. Apr 12 18:23:18.536018 systemd[1]: Started session-13.scope. Apr 12 18:23:18.547000 audit[5033]: USER_START pid=5033 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:18.551000 audit[5035]: CRED_ACQ pid=5035 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:18.805348 sshd[5033]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:18.806000 audit[5033]: USER_END pid=5033 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:18.806000 audit[5033]: CRED_DISP pid=5033 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:18.810661 systemd[1]: session-13.scope: Deactivated successfully. Apr 12 18:23:18.811926 systemd[1]: sshd@12-172.31.30.133:22-139.178.89.65:39300.service: Deactivated successfully. Apr 12 18:23:18.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.30.133:22-139.178.89.65:39300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:18.813984 systemd-logind[1680]: Session 13 logged out. Waiting for processes to exit. Apr 12 18:23:18.817268 systemd-logind[1680]: Removed session 13. Apr 12 18:23:23.846268 kernel: kauditd_printk_skb: 23 callbacks suppressed Apr 12 18:23:23.846432 kernel: audit: type=1130 audit(1712946203.833:1415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.30.133:22-139.178.89.65:39308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:23.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.30.133:22-139.178.89.65:39308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:23.834559 systemd[1]: Started sshd@13-172.31.30.133:22-139.178.89.65:39308.service. Apr 12 18:23:24.004000 audit[5053]: USER_ACCT pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:24.005921 sshd[5053]: Accepted publickey for core from 139.178.89.65 port 39308 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:24.017676 kernel: audit: type=1101 audit(1712946204.004:1416): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:24.019641 sshd[5053]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:24.017000 audit[5053]: CRED_ACQ pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:24.037537 kernel: audit: type=1103 audit(1712946204.017:1417): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:24.037702 kernel: audit: type=1006 audit(1712946204.017:1418): pid=5053 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Apr 12 18:23:24.017000 audit[5053]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0169980 a2=3 a3=1 items=0 ppid=1 pid=5053 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:24.049183 kernel: audit: type=1300 audit(1712946204.017:1418): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0169980 a2=3 a3=1 items=0 ppid=1 pid=5053 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:24.017000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:24.055991 kernel: audit: type=1327 audit(1712946204.017:1418): proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:24.061232 systemd-logind[1680]: New session 14 of user core. Apr 12 18:23:24.063275 systemd[1]: Started session-14.scope. Apr 12 18:23:24.074000 audit[5053]: USER_START pid=5053 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:24.077000 audit[5055]: CRED_ACQ pid=5055 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:24.099330 kernel: audit: type=1105 audit(1712946204.074:1419): pid=5053 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:24.099444 kernel: audit: type=1103 audit(1712946204.077:1420): pid=5055 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:24.350760 sshd[5053]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:24.351000 audit[5053]: USER_END pid=5053 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:24.352000 audit[5053]: CRED_DISP pid=5053 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:24.366283 systemd[1]: sshd@13-172.31.30.133:22-139.178.89.65:39308.service: Deactivated successfully. Apr 12 18:23:24.366751 kernel: audit: type=1106 audit(1712946204.351:1421): pid=5053 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:24.368084 systemd[1]: session-14.scope: Deactivated successfully. Apr 12 18:23:24.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.30.133:22-139.178.89.65:39308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:24.379083 kernel: audit: type=1104 audit(1712946204.352:1422): pid=5053 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:24.378788 systemd-logind[1680]: Session 14 logged out. Waiting for processes to exit. Apr 12 18:23:24.381168 systemd-logind[1680]: Removed session 14. Apr 12 18:23:29.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.30.133:22-139.178.89.65:51602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:29.384140 systemd[1]: Started sshd@14-172.31.30.133:22-139.178.89.65:51602.service. Apr 12 18:23:29.387079 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:23:29.387207 kernel: audit: type=1130 audit(1712946209.383:1424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.30.133:22-139.178.89.65:51602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:29.573920 sshd[5095]: Accepted publickey for core from 139.178.89.65 port 51602 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:29.572000 audit[5095]: USER_ACCT pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:29.584000 audit[5095]: CRED_ACQ pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:29.595826 kernel: audit: type=1101 audit(1712946209.572:1425): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:29.595991 kernel: audit: type=1103 audit(1712946209.584:1426): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:29.585931 sshd[5095]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:29.609671 kernel: audit: type=1006 audit(1712946209.584:1427): pid=5095 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Apr 12 18:23:29.584000 audit[5095]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9078f90 a2=3 a3=1 items=0 ppid=1 pid=5095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:29.611697 systemd-logind[1680]: New session 15 of user core. Apr 12 18:23:29.623039 kernel: audit: type=1300 audit(1712946209.584:1427): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9078f90 a2=3 a3=1 items=0 ppid=1 pid=5095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:29.584000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:29.625123 systemd[1]: Started session-15.scope. Apr 12 18:23:29.626929 kernel: audit: type=1327 audit(1712946209.584:1427): proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:29.641000 audit[5095]: USER_START pid=5095 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:29.654000 audit[5097]: CRED_ACQ pid=5097 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:29.666184 kernel: audit: type=1105 audit(1712946209.641:1428): pid=5095 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:29.666394 kernel: audit: type=1103 audit(1712946209.654:1429): pid=5097 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:29.910918 sshd[5095]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:29.912000 audit[5095]: USER_END pid=5095 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:29.912000 audit[5095]: CRED_DISP pid=5095 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:29.925779 systemd[1]: sshd@14-172.31.30.133:22-139.178.89.65:51602.service: Deactivated successfully. Apr 12 18:23:29.927154 systemd[1]: session-15.scope: Deactivated successfully. Apr 12 18:23:29.934870 kernel: audit: type=1106 audit(1712946209.912:1430): pid=5095 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:29.934991 kernel: audit: type=1104 audit(1712946209.912:1431): pid=5095 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:29.936322 systemd-logind[1680]: Session 15 logged out. Waiting for processes to exit. Apr 12 18:23:29.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.30.133:22-139.178.89.65:51602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:29.939212 systemd-logind[1680]: Removed session 15. Apr 12 18:23:34.954089 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:23:34.954231 kernel: audit: type=1130 audit(1712946214.941:1433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.30.133:22-139.178.89.65:51604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:34.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.30.133:22-139.178.89.65:51604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:34.942875 systemd[1]: Started sshd@15-172.31.30.133:22-139.178.89.65:51604.service. Apr 12 18:23:35.120000 audit[5108]: USER_ACCT pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:35.122747 sshd[5108]: Accepted publickey for core from 139.178.89.65 port 51604 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:35.125728 sshd[5108]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:35.123000 audit[5108]: CRED_ACQ pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:35.134719 kernel: audit: type=1101 audit(1712946215.120:1434): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:35.151212 kernel: audit: type=1103 audit(1712946215.123:1435): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:35.151368 kernel: audit: type=1006 audit(1712946215.123:1436): pid=5108 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Apr 12 18:23:35.151401 systemd[1]: Started session-16.scope. Apr 12 18:23:35.123000 audit[5108]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc455090 a2=3 a3=1 items=0 ppid=1 pid=5108 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:35.162723 kernel: audit: type=1300 audit(1712946215.123:1436): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc455090 a2=3 a3=1 items=0 ppid=1 pid=5108 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:35.153611 systemd-logind[1680]: New session 16 of user core. Apr 12 18:23:35.123000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:35.167850 kernel: audit: type=1327 audit(1712946215.123:1436): proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:35.170000 audit[5108]: USER_START pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:35.184000 audit[5110]: CRED_ACQ pid=5110 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:35.195303 kernel: audit: type=1105 audit(1712946215.170:1437): pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:35.195474 kernel: audit: type=1103 audit(1712946215.184:1438): pid=5110 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:35.456596 sshd[5108]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:35.457000 audit[5108]: USER_END pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:35.462678 systemd-logind[1680]: Session 16 logged out. Waiting for processes to exit. Apr 12 18:23:35.463786 systemd[1]: session-16.scope: Deactivated successfully. Apr 12 18:23:35.464894 systemd[1]: sshd@15-172.31.30.133:22-139.178.89.65:51604.service: Deactivated successfully. Apr 12 18:23:35.468071 systemd-logind[1680]: Removed session 16. Apr 12 18:23:35.457000 audit[5108]: CRED_DISP pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:35.479134 kernel: audit: type=1106 audit(1712946215.457:1439): pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:35.479291 kernel: audit: type=1104 audit(1712946215.457:1440): pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:35.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.30.133:22-139.178.89.65:51604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:40.489240 systemd[1]: Started sshd@16-172.31.30.133:22-139.178.89.65:49216.service. Apr 12 18:23:40.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.30.133:22-139.178.89.65:49216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:40.497545 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:23:40.497654 kernel: audit: type=1130 audit(1712946220.488:1442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.30.133:22-139.178.89.65:49216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:40.664000 audit[5149]: USER_ACCT pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:40.673817 sshd[5149]: Accepted publickey for core from 139.178.89.65 port 49216 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:40.677584 kernel: audit: type=1101 audit(1712946220.664:1443): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:40.678000 audit[5149]: CRED_ACQ pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:40.681330 sshd[5149]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:40.696449 kernel: audit: type=1103 audit(1712946220.678:1444): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:40.696714 kernel: audit: type=1006 audit(1712946220.679:1445): pid=5149 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Apr 12 18:23:40.679000 audit[5149]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff141b860 a2=3 a3=1 items=0 ppid=1 pid=5149 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:40.707616 kernel: audit: type=1300 audit(1712946220.679:1445): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff141b860 a2=3 a3=1 items=0 ppid=1 pid=5149 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:40.679000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:40.711775 kernel: audit: type=1327 audit(1712946220.679:1445): proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:40.718928 systemd-logind[1680]: New session 17 of user core. Apr 12 18:23:40.719259 systemd[1]: Started session-17.scope. Apr 12 18:23:40.730000 audit[5149]: USER_START pid=5149 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:40.745642 kernel: audit: type=1105 audit(1712946220.730:1446): pid=5149 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:40.745769 kernel: audit: type=1103 audit(1712946220.743:1447): pid=5151 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:40.743000 audit[5151]: CRED_ACQ pid=5151 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:40.987472 sshd[5149]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:40.988000 audit[5149]: USER_END pid=5149 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:40.993891 systemd[1]: session-17.scope: Deactivated successfully. Apr 12 18:23:40.995425 systemd[1]: sshd@16-172.31.30.133:22-139.178.89.65:49216.service: Deactivated successfully. Apr 12 18:23:40.989000 audit[5149]: CRED_DISP pid=5149 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:41.011462 kernel: audit: type=1106 audit(1712946220.988:1448): pid=5149 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:41.011679 kernel: audit: type=1104 audit(1712946220.989:1449): pid=5149 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:41.011713 systemd-logind[1680]: Session 17 logged out. Waiting for processes to exit. Apr 12 18:23:40.989000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.30.133:22-139.178.89.65:49216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:41.014371 systemd-logind[1680]: Removed session 17. Apr 12 18:23:42.773555 systemd[1]: run-containerd-runc-k8s.io-15046b11121b07613b3b0dcf0661231b987ae5c0a4c3a3522cd1ee3809f2ec79-runc.LBtguR.mount: Deactivated successfully. Apr 12 18:23:46.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.30.133:22-139.178.89.65:49220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:46.019029 systemd[1]: Started sshd@17-172.31.30.133:22-139.178.89.65:49220.service. Apr 12 18:23:46.021431 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:23:46.021556 kernel: audit: type=1130 audit(1712946226.017:1451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.30.133:22-139.178.89.65:49220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:46.197000 audit[5182]: USER_ACCT pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.199807 sshd[5182]: Accepted publickey for core from 139.178.89.65 port 49220 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:46.211558 kernel: audit: type=1101 audit(1712946226.197:1452): pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.212680 sshd[5182]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:46.210000 audit[5182]: CRED_ACQ pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.229609 kernel: audit: type=1103 audit(1712946226.210:1453): pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.229788 kernel: audit: type=1006 audit(1712946226.210:1454): pid=5182 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Apr 12 18:23:46.243669 kernel: audit: type=1300 audit(1712946226.210:1454): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce025f10 a2=3 a3=1 items=0 ppid=1 pid=5182 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:46.210000 audit[5182]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce025f10 a2=3 a3=1 items=0 ppid=1 pid=5182 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:46.239059 systemd-logind[1680]: New session 18 of user core. Apr 12 18:23:46.239806 systemd[1]: Started session-18.scope. Apr 12 18:23:46.210000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:46.248847 kernel: audit: type=1327 audit(1712946226.210:1454): proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:46.252000 audit[5182]: USER_START pid=5182 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.266637 kernel: audit: type=1105 audit(1712946226.252:1455): pid=5182 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.264000 audit[5184]: CRED_ACQ pid=5184 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.278564 kernel: audit: type=1103 audit(1712946226.264:1456): pid=5184 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.516654 sshd[5182]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:46.517000 audit[5182]: USER_END pid=5182 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.521025 systemd[1]: session-18.scope: Deactivated successfully. Apr 12 18:23:46.522241 systemd[1]: sshd@17-172.31.30.133:22-139.178.89.65:49220.service: Deactivated successfully. Apr 12 18:23:46.517000 audit[5182]: CRED_DISP pid=5182 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.540629 kernel: audit: type=1106 audit(1712946226.517:1457): pid=5182 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.540821 kernel: audit: type=1104 audit(1712946226.517:1458): pid=5182 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.540985 systemd-logind[1680]: Session 18 logged out. Waiting for processes to exit. Apr 12 18:23:46.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.30.133:22-139.178.89.65:49220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:46.551850 systemd[1]: Started sshd@18-172.31.30.133:22-139.178.89.65:49232.service. Apr 12 18:23:46.550000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.30.133:22-139.178.89.65:49232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:46.554569 systemd-logind[1680]: Removed session 18. Apr 12 18:23:46.729000 audit[5194]: USER_ACCT pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.732616 sshd[5194]: Accepted publickey for core from 139.178.89.65 port 49232 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:46.732000 audit[5194]: CRED_ACQ pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.732000 audit[5194]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4eb3950 a2=3 a3=1 items=0 ppid=1 pid=5194 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:46.732000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:46.734870 sshd[5194]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:46.745171 systemd-logind[1680]: New session 19 of user core. Apr 12 18:23:46.745203 systemd[1]: Started session-19.scope. Apr 12 18:23:46.756000 audit[5194]: USER_START pid=5194 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:46.759000 audit[5196]: CRED_ACQ pid=5196 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:47.208884 sshd[5194]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:47.209000 audit[5194]: USER_END pid=5194 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:47.210000 audit[5194]: CRED_DISP pid=5194 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:47.214337 systemd-logind[1680]: Session 19 logged out. Waiting for processes to exit. Apr 12 18:23:47.216333 systemd[1]: sshd@18-172.31.30.133:22-139.178.89.65:49232.service: Deactivated successfully. Apr 12 18:23:47.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.30.133:22-139.178.89.65:49232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:47.217948 systemd[1]: session-19.scope: Deactivated successfully. Apr 12 18:23:47.219829 systemd-logind[1680]: Removed session 19. Apr 12 18:23:47.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.30.133:22-139.178.89.65:36336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:47.240151 systemd[1]: Started sshd@19-172.31.30.133:22-139.178.89.65:36336.service. Apr 12 18:23:47.419000 audit[5204]: USER_ACCT pid=5204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:47.422673 sshd[5204]: Accepted publickey for core from 139.178.89.65 port 36336 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:47.422000 audit[5204]: CRED_ACQ pid=5204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:47.422000 audit[5204]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe62b13b0 a2=3 a3=1 items=0 ppid=1 pid=5204 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:47.422000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:47.425492 sshd[5204]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:47.437172 systemd[1]: Started session-20.scope. Apr 12 18:23:47.437992 systemd-logind[1680]: New session 20 of user core. Apr 12 18:23:47.448000 audit[5204]: USER_START pid=5204 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:47.451000 audit[5206]: CRED_ACQ pid=5206 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:48.945900 sshd[5204]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:48.947000 audit[5204]: USER_END pid=5204 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:48.947000 audit[5204]: CRED_DISP pid=5204 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:48.952232 systemd[1]: session-20.scope: Deactivated successfully. Apr 12 18:23:48.952725 systemd[1]: session-20.scope: Consumed 1.109s CPU time. Apr 12 18:23:48.953000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.30.133:22-139.178.89.65:36336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:48.954894 systemd[1]: sshd@19-172.31.30.133:22-139.178.89.65:36336.service: Deactivated successfully. Apr 12 18:23:48.955558 systemd-logind[1680]: Session 20 logged out. Waiting for processes to exit. Apr 12 18:23:48.959521 systemd-logind[1680]: Removed session 20. Apr 12 18:23:48.974000 audit[5223]: NETFILTER_CFG table=filter:111 family=2 entries=20 op=nft_register_rule pid=5223 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:48.974000 audit[5223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11860 a0=3 a1=ffffe11086d0 a2=0 a3=1 items=0 ppid=2954 pid=5223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:48.974000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:48.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.30.133:22-139.178.89.65:36346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:48.982768 systemd[1]: Started sshd@20-172.31.30.133:22-139.178.89.65:36346.service. Apr 12 18:23:48.976000 audit[5223]: NETFILTER_CFG table=nat:112 family=2 entries=20 op=nft_register_rule pid=5223 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:48.976000 audit[5223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffe11086d0 a2=0 a3=1 items=0 ppid=2954 pid=5223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:48.976000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:49.040000 audit[5228]: NETFILTER_CFG table=filter:113 family=2 entries=32 op=nft_register_rule pid=5228 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:49.040000 audit[5228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11860 a0=3 a1=ffffe5f9c940 a2=0 a3=1 items=0 ppid=2954 pid=5228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:49.040000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:49.053000 audit[5228]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=5228 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:49.053000 audit[5228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffe5f9c940 a2=0 a3=1 items=0 ppid=2954 pid=5228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:49.053000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:49.163997 sshd[5225]: Accepted publickey for core from 139.178.89.65 port 36346 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:49.162000 audit[5225]: USER_ACCT pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:49.164000 audit[5225]: CRED_ACQ pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:49.164000 audit[5225]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf571590 a2=3 a3=1 items=0 ppid=1 pid=5225 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:49.164000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:49.167314 sshd[5225]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:49.177634 systemd-logind[1680]: New session 21 of user core. Apr 12 18:23:49.178177 systemd[1]: Started session-21.scope. Apr 12 18:23:49.187000 audit[5225]: USER_START pid=5225 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:49.189000 audit[5229]: CRED_ACQ pid=5229 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:50.037068 sshd[5225]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:50.038000 audit[5225]: USER_END pid=5225 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:50.038000 audit[5225]: CRED_DISP pid=5225 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:50.042000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.30.133:22-139.178.89.65:36346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:50.043373 systemd-logind[1680]: Session 21 logged out. Waiting for processes to exit. Apr 12 18:23:50.043955 systemd[1]: sshd@20-172.31.30.133:22-139.178.89.65:36346.service: Deactivated successfully. Apr 12 18:23:50.045453 systemd[1]: session-21.scope: Deactivated successfully. Apr 12 18:23:50.048809 systemd-logind[1680]: Removed session 21. Apr 12 18:23:50.067055 systemd[1]: Started sshd@21-172.31.30.133:22-139.178.89.65:36360.service. Apr 12 18:23:50.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.30.133:22-139.178.89.65:36360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:50.244000 audit[5239]: USER_ACCT pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:50.246253 sshd[5239]: Accepted publickey for core from 139.178.89.65 port 36360 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:50.246000 audit[5239]: CRED_ACQ pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:50.246000 audit[5239]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf2ce460 a2=3 a3=1 items=0 ppid=1 pid=5239 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:50.246000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:50.249482 sshd[5239]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:50.258335 systemd-logind[1680]: New session 22 of user core. Apr 12 18:23:50.258788 systemd[1]: Started session-22.scope. Apr 12 18:23:50.268000 audit[5239]: USER_START pid=5239 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:50.270000 audit[5241]: CRED_ACQ pid=5241 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:50.523361 sshd[5239]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:50.523000 audit[5239]: USER_END pid=5239 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:50.524000 audit[5239]: CRED_DISP pid=5239 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:50.528450 systemd-logind[1680]: Session 22 logged out. Waiting for processes to exit. Apr 12 18:23:50.528650 systemd[1]: session-22.scope: Deactivated successfully. Apr 12 18:23:50.531062 systemd[1]: sshd@21-172.31.30.133:22-139.178.89.65:36360.service: Deactivated successfully. Apr 12 18:23:50.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.30.133:22-139.178.89.65:36360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:50.532883 systemd-logind[1680]: Removed session 22. Apr 12 18:23:55.563108 systemd[1]: Started sshd@22-172.31.30.133:22-139.178.89.65:36364.service. Apr 12 18:23:55.574817 kernel: kauditd_printk_skb: 57 callbacks suppressed Apr 12 18:23:55.574955 kernel: audit: type=1130 audit(1712946235.561:1500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.30.133:22-139.178.89.65:36364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:55.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.30.133:22-139.178.89.65:36364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:55.737000 audit[5251]: USER_ACCT pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:55.741760 sshd[5251]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:23:55.746235 sshd[5251]: Accepted publickey for core from 139.178.89.65 port 36364 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:23:55.737000 audit[5251]: CRED_ACQ pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:55.761104 kernel: audit: type=1101 audit(1712946235.737:1501): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:55.761284 kernel: audit: type=1103 audit(1712946235.737:1502): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:55.768400 kernel: audit: type=1006 audit(1712946235.737:1503): pid=5251 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Apr 12 18:23:55.769946 systemd-logind[1680]: New session 23 of user core. Apr 12 18:23:55.771827 systemd[1]: Started session-23.scope. Apr 12 18:23:55.737000 audit[5251]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2951940 a2=3 a3=1 items=0 ppid=1 pid=5251 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:55.737000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:55.790894 kernel: audit: type=1300 audit(1712946235.737:1503): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2951940 a2=3 a3=1 items=0 ppid=1 pid=5251 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:55.791038 kernel: audit: type=1327 audit(1712946235.737:1503): proctitle=737368643A20636F7265205B707269765D Apr 12 18:23:55.794000 audit[5251]: USER_START pid=5251 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:55.808000 audit[5253]: CRED_ACQ pid=5253 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:55.820097 kernel: audit: type=1105 audit(1712946235.794:1504): pid=5251 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:55.820296 kernel: audit: type=1103 audit(1712946235.808:1505): pid=5253 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:56.097124 sshd[5251]: pam_unix(sshd:session): session closed for user core Apr 12 18:23:56.098000 audit[5251]: USER_END pid=5251 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:56.102748 systemd[1]: session-23.scope: Deactivated successfully. Apr 12 18:23:56.104330 systemd[1]: sshd@22-172.31.30.133:22-139.178.89.65:36364.service: Deactivated successfully. Apr 12 18:23:56.112612 systemd-logind[1680]: Session 23 logged out. Waiting for processes to exit. Apr 12 18:23:56.098000 audit[5251]: CRED_DISP pid=5251 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:56.122158 kernel: audit: type=1106 audit(1712946236.098:1506): pid=5251 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:56.122496 kernel: audit: type=1104 audit(1712946236.098:1507): pid=5251 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:23:56.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.30.133:22-139.178.89.65:36364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:23:56.122913 systemd-logind[1680]: Removed session 23. Apr 12 18:23:56.745171 kubelet[2815]: I0412 18:23:56.745089 2815 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-hb8c9" podStartSLOduration=81.828967617 podCreationTimestamp="2024-04-12 18:22:28 +0000 UTC" firstStartedPulling="2024-04-12 18:23:00.585107964 +0000 UTC m=+54.320713778" lastFinishedPulling="2024-04-12 18:23:07.501131289 +0000 UTC m=+61.236737103" observedRunningTime="2024-04-12 18:23:08.096441424 +0000 UTC m=+61.832047250" watchObservedRunningTime="2024-04-12 18:23:56.744990942 +0000 UTC m=+110.480596768" Apr 12 18:23:56.745886 kubelet[2815]: I0412 18:23:56.745591 2815 topology_manager.go:212] "Topology Admit Handler" Apr 12 18:23:56.757238 systemd[1]: Created slice kubepods-besteffort-pod97d39292_b17a_4282_bea6_25f5e42665e1.slice. Apr 12 18:23:56.769101 kubelet[2815]: W0412 18:23:56.769025 2815 reflector.go:533] object-"calico-apiserver"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:23:56.769101 kubelet[2815]: E0412 18:23:56.769106 2815 reflector.go:148] object-"calico-apiserver"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:23:56.774492 kubelet[2815]: W0412 18:23:56.774434 2815 reflector.go:533] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:23:56.774492 kubelet[2815]: E0412 18:23:56.774491 2815 reflector.go:148] object-"calico-apiserver"/"calico-apiserver-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ip-172-31-30-133" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-30-133' and this object Apr 12 18:23:56.820000 audit[5264]: NETFILTER_CFG table=filter:115 family=2 entries=33 op=nft_register_rule pid=5264 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:56.820000 audit[5264]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12604 a0=3 a1=ffffdf935570 a2=0 a3=1 items=0 ppid=2954 pid=5264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:56.820000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:56.822000 audit[5264]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=5264 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:56.822000 audit[5264]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffdf935570 a2=0 a3=1 items=0 ppid=2954 pid=5264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:56.822000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:56.841224 kubelet[2815]: I0412 18:23:56.841173 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4wksm\" (UniqueName: \"kubernetes.io/projected/97d39292-b17a-4282-bea6-25f5e42665e1-kube-api-access-4wksm\") pod \"calico-apiserver-989fcbf57-zcpbl\" (UID: \"97d39292-b17a-4282-bea6-25f5e42665e1\") " pod="calico-apiserver/calico-apiserver-989fcbf57-zcpbl" Apr 12 18:23:56.841415 kubelet[2815]: I0412 18:23:56.841366 2815 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/97d39292-b17a-4282-bea6-25f5e42665e1-calico-apiserver-certs\") pod \"calico-apiserver-989fcbf57-zcpbl\" (UID: \"97d39292-b17a-4282-bea6-25f5e42665e1\") " pod="calico-apiserver/calico-apiserver-989fcbf57-zcpbl" Apr 12 18:23:56.845000 audit[5266]: NETFILTER_CFG table=filter:117 family=2 entries=34 op=nft_register_rule pid=5266 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:56.845000 audit[5266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12604 a0=3 a1=ffffef3f6160 a2=0 a3=1 items=0 ppid=2954 pid=5266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:56.845000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:56.847000 audit[5266]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=5266 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:56.847000 audit[5266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffef3f6160 a2=0 a3=1 items=0 ppid=2954 pid=5266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:56.847000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:57.878000 audit[5269]: NETFILTER_CFG table=filter:119 family=2 entries=22 op=nft_register_rule pid=5269 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:57.878000 audit[5269]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffdd0d8720 a2=0 a3=1 items=0 ppid=2954 pid=5269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:57.878000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:57.883000 audit[5269]: NETFILTER_CFG table=nat:120 family=2 entries=104 op=nft_register_chain pid=5269 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:23:57.883000 audit[5269]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffdd0d8720 a2=0 a3=1 items=0 ppid=2954 pid=5269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:57.883000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:23:57.942547 kubelet[2815]: E0412 18:23:57.942478 2815 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: failed to sync secret cache: timed out waiting for the condition Apr 12 18:23:57.945539 kubelet[2815]: E0412 18:23:57.943315 2815 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/97d39292-b17a-4282-bea6-25f5e42665e1-calico-apiserver-certs podName:97d39292-b17a-4282-bea6-25f5e42665e1 nodeName:}" failed. No retries permitted until 2024-04-12 18:23:58.443280956 +0000 UTC m=+112.178886770 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/97d39292-b17a-4282-bea6-25f5e42665e1-calico-apiserver-certs") pod "calico-apiserver-989fcbf57-zcpbl" (UID: "97d39292-b17a-4282-bea6-25f5e42665e1") : failed to sync secret cache: timed out waiting for the condition Apr 12 18:23:58.566152 env[1688]: time="2024-04-12T18:23:58.566079877Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-989fcbf57-zcpbl,Uid:97d39292-b17a-4282-bea6-25f5e42665e1,Namespace:calico-apiserver,Attempt:0,}" Apr 12 18:23:58.795245 systemd-networkd[1498]: cali18099eba872: Link UP Apr 12 18:23:58.802452 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Apr 12 18:23:58.802696 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali18099eba872: link becomes ready Apr 12 18:23:58.802016 systemd-networkd[1498]: cali18099eba872: Gained carrier Apr 12 18:23:58.803314 (udev-worker)[5289]: Network interface NamePolicy= disabled on kernel command line. Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.656 [INFO][5274] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-eth0 calico-apiserver-989fcbf57- calico-apiserver 97d39292-b17a-4282-bea6-25f5e42665e1 1112 0 2024-04-12 18:23:56 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:989fcbf57 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-30-133 calico-apiserver-989fcbf57-zcpbl eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali18099eba872 [] []}} ContainerID="3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" Namespace="calico-apiserver" Pod="calico-apiserver-989fcbf57-zcpbl" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-" Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.657 [INFO][5274] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" Namespace="calico-apiserver" Pod="calico-apiserver-989fcbf57-zcpbl" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-eth0" Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.711 [INFO][5283] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" HandleID="k8s-pod-network.3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" Workload="ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-eth0" Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.732 [INFO][5283] ipam_plugin.go 268: Auto assigning IP ContainerID="3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" HandleID="k8s-pod-network.3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" Workload="ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000326cc0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-30-133", "pod":"calico-apiserver-989fcbf57-zcpbl", "timestamp":"2024-04-12 18:23:58.711639222 +0000 UTC"}, Hostname:"ip-172-31-30-133", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.732 [INFO][5283] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.732 [INFO][5283] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.732 [INFO][5283] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-133' Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.736 [INFO][5283] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" host="ip-172-31-30-133" Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.744 [INFO][5283] ipam.go 372: Looking up existing affinities for host host="ip-172-31-30-133" Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.753 [INFO][5283] ipam.go 489: Trying affinity for 192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.757 [INFO][5283] ipam.go 155: Attempting to load block cidr=192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.762 [INFO][5283] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.60.128/26 host="ip-172-31-30-133" Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.762 [INFO][5283] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.60.128/26 handle="k8s-pod-network.3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" host="ip-172-31-30-133" Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.765 [INFO][5283] ipam.go 1682: Creating new handle: k8s-pod-network.3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0 Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.773 [INFO][5283] ipam.go 1203: Writing block in order to claim IPs block=192.168.60.128/26 handle="k8s-pod-network.3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" host="ip-172-31-30-133" Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.784 [INFO][5283] ipam.go 1216: Successfully claimed IPs: [192.168.60.133/26] block=192.168.60.128/26 handle="k8s-pod-network.3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" host="ip-172-31-30-133" Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.784 [INFO][5283] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.60.133/26] handle="k8s-pod-network.3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" host="ip-172-31-30-133" Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.785 [INFO][5283] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:23:58.838670 env[1688]: 2024-04-12 18:23:58.785 [INFO][5283] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.60.133/26] IPv6=[] ContainerID="3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" HandleID="k8s-pod-network.3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" Workload="ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-eth0" Apr 12 18:23:58.840091 env[1688]: 2024-04-12 18:23:58.787 [INFO][5274] k8s.go 385: Populated endpoint ContainerID="3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" Namespace="calico-apiserver" Pod="calico-apiserver-989fcbf57-zcpbl" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-eth0", GenerateName:"calico-apiserver-989fcbf57-", Namespace:"calico-apiserver", SelfLink:"", UID:"97d39292-b17a-4282-bea6-25f5e42665e1", ResourceVersion:"1112", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 23, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"989fcbf57", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"", Pod:"calico-apiserver-989fcbf57-zcpbl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.60.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali18099eba872", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:23:58.840091 env[1688]: 2024-04-12 18:23:58.787 [INFO][5274] k8s.go 386: Calico CNI using IPs: [192.168.60.133/32] ContainerID="3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" Namespace="calico-apiserver" Pod="calico-apiserver-989fcbf57-zcpbl" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-eth0" Apr 12 18:23:58.840091 env[1688]: 2024-04-12 18:23:58.788 [INFO][5274] dataplane_linux.go 68: Setting the host side veth name to cali18099eba872 ContainerID="3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" Namespace="calico-apiserver" Pod="calico-apiserver-989fcbf57-zcpbl" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-eth0" Apr 12 18:23:58.840091 env[1688]: 2024-04-12 18:23:58.803 [INFO][5274] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" Namespace="calico-apiserver" Pod="calico-apiserver-989fcbf57-zcpbl" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-eth0" Apr 12 18:23:58.840091 env[1688]: 2024-04-12 18:23:58.807 [INFO][5274] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" Namespace="calico-apiserver" Pod="calico-apiserver-989fcbf57-zcpbl" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-eth0", GenerateName:"calico-apiserver-989fcbf57-", Namespace:"calico-apiserver", SelfLink:"", UID:"97d39292-b17a-4282-bea6-25f5e42665e1", ResourceVersion:"1112", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 23, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"989fcbf57", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-133", ContainerID:"3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0", Pod:"calico-apiserver-989fcbf57-zcpbl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.60.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali18099eba872", MAC:"3e:e3:4e:95:45:04", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:23:58.840091 env[1688]: 2024-04-12 18:23:58.829 [INFO][5274] k8s.go 498: Wrote updated endpoint to datastore ContainerID="3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0" Namespace="calico-apiserver" Pod="calico-apiserver-989fcbf57-zcpbl" WorkloadEndpoint="ip--172--31--30--133-k8s-calico--apiserver--989fcbf57--zcpbl-eth0" Apr 12 18:23:58.882121 env[1688]: time="2024-04-12T18:23:58.881493648Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:23:58.882121 env[1688]: time="2024-04-12T18:23:58.881601470Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:23:58.882121 env[1688]: time="2024-04-12T18:23:58.881642391Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:23:58.882567 env[1688]: time="2024-04-12T18:23:58.882430109Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0 pid=5313 runtime=io.containerd.runc.v2 Apr 12 18:23:58.926991 systemd[1]: run-containerd-runc-k8s.io-3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0-runc.awnqjv.mount: Deactivated successfully. Apr 12 18:23:58.944000 audit[5334]: NETFILTER_CFG table=filter:121 family=2 entries=59 op=nft_register_chain pid=5334 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:23:58.944000 audit[5334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=30140 a0=3 a1=ffffd5387b20 a2=0 a3=ffff8b7b9fa8 items=0 ppid=3875 pid=5334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:58.944000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:23:58.950224 systemd[1]: Started cri-containerd-3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0.scope. Apr 12 18:23:58.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.974000 audit: BPF prog-id=189 op=LOAD Apr 12 18:23:58.977000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.977000 audit[5325]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=5313 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:58.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364346231386438383735396531613739356236656533353236663432 Apr 12 18:23:58.977000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.977000 audit[5325]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=5313 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:58.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364346231386438383735396531613739356236656533353236663432 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit: BPF prog-id=190 op=LOAD Apr 12 18:23:58.978000 audit[5325]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=5313 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:58.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364346231386438383735396531613739356236656533353236663432 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.978000 audit: BPF prog-id=191 op=LOAD Apr 12 18:23:58.978000 audit[5325]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=5313 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:58.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364346231386438383735396531613739356236656533353236663432 Apr 12 18:23:58.978000 audit: BPF prog-id=191 op=UNLOAD Apr 12 18:23:58.979000 audit: BPF prog-id=190 op=UNLOAD Apr 12 18:23:58.979000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.979000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.979000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.979000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.979000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.979000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.979000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.979000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.979000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.979000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:23:58.979000 audit: BPF prog-id=192 op=LOAD Apr 12 18:23:58.979000 audit[5325]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=5313 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:23:58.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364346231386438383735396531613739356236656533353236663432 Apr 12 18:23:59.039117 env[1688]: time="2024-04-12T18:23:59.037362192Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-989fcbf57-zcpbl,Uid:97d39292-b17a-4282-bea6-25f5e42665e1,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0\"" Apr 12 18:23:59.044961 env[1688]: time="2024-04-12T18:23:59.041911680Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.3\"" Apr 12 18:23:59.890614 systemd[1]: run-containerd-runc-k8s.io-c8381af262fb63792b56533a6be99959b5e531c9d7dde533d05b101f5c8fb259-runc.6KQMBH.mount: Deactivated successfully. Apr 12 18:24:00.301495 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount253341071.mount: Deactivated successfully. Apr 12 18:24:00.312847 systemd-networkd[1498]: cali18099eba872: Gained IPv6LL Apr 12 18:24:00.790000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:00.793240 kernel: kauditd_printk_skb: 79 callbacks suppressed Apr 12 18:24:00.793433 kernel: audit: type=1400 audit(1712946240.790:1534): avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:00.790000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000eb9440 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:24:00.820704 kernel: audit: type=1300 audit(1712946240.790:1534): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000eb9440 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:24:00.790000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:24:00.790000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:00.842636 kernel: audit: type=1327 audit(1712946240.790:1534): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:24:00.790000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c31fc0 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:24:00.869188 kernel: audit: type=1400 audit(1712946240.790:1535): avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:00.869330 kernel: audit: type=1300 audit(1712946240.790:1535): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c31fc0 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:24:00.790000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:24:00.880540 kernel: audit: type=1327 audit(1712946240.790:1535): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:24:01.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.30.133:22-139.178.89.65:39146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:01.127304 systemd[1]: Started sshd@23-172.31.30.133:22-139.178.89.65:39146.service. Apr 12 18:24:01.143737 kernel: audit: type=1130 audit(1712946241.127:1536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.30.133:22-139.178.89.65:39146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:01.343000 audit[5376]: USER_ACCT pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:01.354185 sshd[5376]: Accepted publickey for core from 139.178.89.65 port 39146 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:24:01.356000 audit[5376]: CRED_ACQ pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:01.367025 kernel: audit: type=1101 audit(1712946241.343:1537): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:01.367146 kernel: audit: type=1103 audit(1712946241.356:1538): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:01.357678 sshd[5376]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:24:01.378277 kernel: audit: type=1006 audit(1712946241.356:1539): pid=5376 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Apr 12 18:24:01.385618 systemd[1]: Started session-24.scope. Apr 12 18:24:01.387306 systemd-logind[1680]: New session 24 of user core. Apr 12 18:24:01.356000 audit[5376]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc06f3460 a2=3 a3=1 items=0 ppid=1 pid=5376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:01.356000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:24:01.411000 audit[5376]: USER_START pid=5376 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:01.414000 audit[5378]: CRED_ACQ pid=5378 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:01.803000 audit[5380]: NETFILTER_CFG table=filter:122 family=2 entries=10 op=nft_register_rule pid=5380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:24:01.803000 audit[5380]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffe34143b0 a2=0 a3=1 items=0 ppid=2954 pid=5380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:01.803000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:24:01.813152 sshd[5376]: pam_unix(sshd:session): session closed for user core Apr 12 18:24:01.824000 audit[5376]: USER_END pid=5376 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:01.824000 audit[5376]: CRED_DISP pid=5376 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:01.827473 systemd[1]: sshd@23-172.31.30.133:22-139.178.89.65:39146.service: Deactivated successfully. Apr 12 18:24:01.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.30.133:22-139.178.89.65:39146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:01.831032 systemd[1]: session-24.scope: Deactivated successfully. Apr 12 18:24:01.833430 systemd-logind[1680]: Session 24 logged out. Waiting for processes to exit. Apr 12 18:24:01.835956 systemd-logind[1680]: Removed session 24. Apr 12 18:24:01.851000 audit[5380]: NETFILTER_CFG table=nat:123 family=2 entries=44 op=nft_register_rule pid=5380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:24:01.851000 audit[5380]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14988 a0=3 a1=ffffe34143b0 a2=0 a3=1 items=0 ppid=2954 pid=5380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:01.851000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:24:02.197737 env[1688]: time="2024-04-12T18:24:02.197568618Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:24:02.203142 env[1688]: time="2024-04-12T18:24:02.203063700Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3aea99931f98596bbd91a0676e06a4bae9ce7cc2657a7d5603628bfeecf71ff4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:24:02.208063 env[1688]: time="2024-04-12T18:24:02.207976988Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:24:02.213701 env[1688]: time="2024-04-12T18:24:02.213612305Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:62b75df90aa008b11fee8f555f22bfc00d3dc6af5053185c293ee3467342f32a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:24:02.217019 env[1688]: time="2024-04-12T18:24:02.215498404Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.3\" returns image reference \"sha256:3aea99931f98596bbd91a0676e06a4bae9ce7cc2657a7d5603628bfeecf71ff4\"" Apr 12 18:24:02.220933 env[1688]: time="2024-04-12T18:24:02.220495837Z" level=info msg="CreateContainer within sandbox \"3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Apr 12 18:24:02.246186 env[1688]: time="2024-04-12T18:24:02.246114526Z" level=info msg="CreateContainer within sandbox \"3d4b18d88759e1a795b6ee3526f4241fdebce2cc1872f38d5e4ad86bfd8cf4d0\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"b55e658cf5430a117918b3668c882c2e6cde09b8a031923d2296835ef3b19a80\"" Apr 12 18:24:02.249651 env[1688]: time="2024-04-12T18:24:02.249559682Z" level=info msg="StartContainer for \"b55e658cf5430a117918b3668c882c2e6cde09b8a031923d2296835ef3b19a80\"" Apr 12 18:24:02.320000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:02.320000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4010cffa40 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:24:02.320000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:24:02.328741 systemd[1]: Started cri-containerd-b55e658cf5430a117918b3668c882c2e6cde09b8a031923d2296835ef3b19a80.scope. Apr 12 18:24:02.336000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:02.336000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4010cffda0 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:24:02.336000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:24:02.340000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:02.340000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4011f758c0 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:24:02.340000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:24:02.340000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:02.340000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=400d2256c0 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:24:02.340000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:24:02.348000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:02.348000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4010ddd640 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:24:02.348000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:24:02.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.368000 audit: BPF prog-id=193 op=LOAD Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=5313 pid=5395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:02.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235356536353863663534333061313137393138623336363863383832 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=5313 pid=5395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:02.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235356536353863663534333061313137393138623336363863383832 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit: BPF prog-id=194 op=LOAD Apr 12 18:24:02.369000 audit[5395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=5313 pid=5395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:02.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235356536353863663534333061313137393138623336363863383832 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.369000 audit: BPF prog-id=195 op=LOAD Apr 12 18:24:02.369000 audit[5395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=5313 pid=5395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:02.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235356536353863663534333061313137393138623336363863383832 Apr 12 18:24:02.370000 audit: BPF prog-id=195 op=UNLOAD Apr 12 18:24:02.370000 audit: BPF prog-id=194 op=UNLOAD Apr 12 18:24:02.370000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.370000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.370000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.370000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.370000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.370000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.370000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.370000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.370000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.370000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:02.370000 audit: BPF prog-id=196 op=LOAD Apr 12 18:24:02.370000 audit[5395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=5313 pid=5395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:02.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235356536353863663534333061313137393138623336363863383832 Apr 12 18:24:02.429761 env[1688]: time="2024-04-12T18:24:02.429684884Z" level=info msg="StartContainer for \"b55e658cf5430a117918b3668c882c2e6cde09b8a031923d2296835ef3b19a80\" returns successfully" Apr 12 18:24:02.508000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:02.508000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=400f22bbc0 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:24:02.508000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:24:03.343000 audit[5426]: NETFILTER_CFG table=filter:124 family=2 entries=10 op=nft_register_rule pid=5426 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:24:03.343000 audit[5426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffc7c25250 a2=0 a3=1 items=0 ppid=2954 pid=5426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:03.343000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:24:03.354000 audit[5426]: NETFILTER_CFG table=nat:125 family=2 entries=44 op=nft_register_rule pid=5426 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:24:03.354000 audit[5426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14988 a0=3 a1=ffffc7c25250 a2=0 a3=1 items=0 ppid=2954 pid=5426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:03.354000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:24:04.726000 audit[5406]: AVC avc: denied { watch } for pid=5406 comm="apiserver" path="/calico-apiserver-certs/..2024_04_12_18_23_58.1053546144/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c393 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c393 tclass=file permissive=0 Apr 12 18:24:04.726000 audit[5406]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000ae6d00 a2=fc6 a3=0 items=0 ppid=5313 pid=5406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c393 key=(null) Apr 12 18:24:04.726000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Apr 12 18:24:05.828551 kernel: kauditd_printk_skb: 97 callbacks suppressed Apr 12 18:24:05.828732 kernel: audit: type=1400 audit(1712946245.823:1574): avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:05.823000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:05.823000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f6ae00 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:24:05.847991 kernel: audit: type=1300 audit(1712946245.823:1574): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f6ae00 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:24:05.823000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:24:05.860454 kernel: audit: type=1327 audit(1712946245.823:1574): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:24:05.860649 kernel: audit: type=1400 audit(1712946245.840:1575): avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:05.840000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:05.840000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f01680 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:24:05.882465 kernel: audit: type=1300 audit(1712946245.840:1575): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f01680 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:24:05.882682 kernel: audit: type=1327 audit(1712946245.840:1575): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:24:05.840000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:24:05.847000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:05.902756 kernel: audit: type=1400 audit(1712946245.847:1576): avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:05.902950 kernel: audit: type=1300 audit(1712946245.847:1576): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f6b0e0 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:24:05.847000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f6b0e0 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:24:05.847000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:24:05.926074 kernel: audit: type=1327 audit(1712946245.847:1576): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:24:05.926242 kernel: audit: type=1400 audit(1712946245.847:1577): avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:05.847000 audit[2597]: AVC avc: denied { watch } for pid=2597 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:05.847000 audit[2597]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f6b120 a2=fc6 a3=0 items=0 ppid=2443 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:24:05.847000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:24:06.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.30.133:22-139.178.89.65:39148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:06.847303 systemd[1]: Started sshd@24-172.31.30.133:22-139.178.89.65:39148.service. Apr 12 18:24:07.041000 audit[5432]: USER_ACCT pid=5432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:07.042258 sshd[5432]: Accepted publickey for core from 139.178.89.65 port 39148 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:24:07.044000 audit[5432]: CRED_ACQ pid=5432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:07.044000 audit[5432]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc10613d0 a2=3 a3=1 items=0 ppid=1 pid=5432 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:07.044000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:24:07.046147 sshd[5432]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:24:07.058403 systemd[1]: Started session-25.scope. Apr 12 18:24:07.059479 systemd-logind[1680]: New session 25 of user core. Apr 12 18:24:07.075000 audit[5432]: USER_START pid=5432 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:07.078000 audit[5434]: CRED_ACQ pid=5434 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:07.360660 sshd[5432]: pam_unix(sshd:session): session closed for user core Apr 12 18:24:07.362000 audit[5432]: USER_END pid=5432 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:07.362000 audit[5432]: CRED_DISP pid=5432 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:07.365053 systemd[1]: session-25.scope: Deactivated successfully. Apr 12 18:24:07.366661 systemd-logind[1680]: Session 25 logged out. Waiting for processes to exit. Apr 12 18:24:07.367018 systemd[1]: sshd@24-172.31.30.133:22-139.178.89.65:39148.service: Deactivated successfully. Apr 12 18:24:07.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.30.133:22-139.178.89.65:39148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:07.371116 systemd-logind[1680]: Removed session 25. Apr 12 18:24:08.370684 amazon-ssm-agent[1666]: 2024-04-12 18:24:08 INFO [HealthCheck] HealthCheck reporting agent health. Apr 12 18:24:12.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.30.133:22-139.178.89.65:46258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:12.388966 systemd[1]: Started sshd@25-172.31.30.133:22-139.178.89.65:46258.service. Apr 12 18:24:12.393023 kernel: kauditd_printk_skb: 13 callbacks suppressed Apr 12 18:24:12.393206 kernel: audit: type=1130 audit(1712946252.388:1587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.30.133:22-139.178.89.65:46258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:12.564000 audit[5452]: USER_ACCT pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:12.565698 sshd[5452]: Accepted publickey for core from 139.178.89.65 port 46258 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:24:12.576632 kernel: audit: type=1101 audit(1712946252.564:1588): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:12.577000 audit[5452]: CRED_ACQ pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:12.579204 sshd[5452]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:24:12.595204 kernel: audit: type=1103 audit(1712946252.577:1589): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:12.595315 kernel: audit: type=1006 audit(1712946252.577:1590): pid=5452 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Apr 12 18:24:12.577000 audit[5452]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4bbaf20 a2=3 a3=1 items=0 ppid=1 pid=5452 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:12.577000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:24:12.610419 kernel: audit: type=1300 audit(1712946252.577:1590): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4bbaf20 a2=3 a3=1 items=0 ppid=1 pid=5452 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:12.610566 kernel: audit: type=1327 audit(1712946252.577:1590): proctitle=737368643A20636F7265205B707269765D Apr 12 18:24:12.612492 systemd-logind[1680]: New session 26 of user core. Apr 12 18:24:12.612596 systemd[1]: Started session-26.scope. Apr 12 18:24:12.622000 audit[5452]: USER_START pid=5452 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:12.625000 audit[5454]: CRED_ACQ pid=5454 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:12.643927 kernel: audit: type=1105 audit(1712946252.622:1591): pid=5452 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:12.644092 kernel: audit: type=1103 audit(1712946252.625:1592): pid=5454 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:12.777567 systemd[1]: run-containerd-runc-k8s.io-15046b11121b07613b3b0dcf0661231b987ae5c0a4c3a3522cd1ee3809f2ec79-runc.gQ30Mf.mount: Deactivated successfully. Apr 12 18:24:12.914897 sshd[5452]: pam_unix(sshd:session): session closed for user core Apr 12 18:24:12.916000 audit[5452]: USER_END pid=5452 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:12.920917 systemd[1]: session-26.scope: Deactivated successfully. Apr 12 18:24:12.922301 systemd[1]: sshd@25-172.31.30.133:22-139.178.89.65:46258.service: Deactivated successfully. Apr 12 18:24:12.918000 audit[5452]: CRED_DISP pid=5452 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:12.929672 kernel: audit: type=1106 audit(1712946252.916:1593): pid=5452 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:12.939258 systemd-logind[1680]: Session 26 logged out. Waiting for processes to exit. Apr 12 18:24:12.922000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.30.133:22-139.178.89.65:46258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:12.940590 kernel: audit: type=1104 audit(1712946252.918:1594): pid=5452 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:12.941039 systemd-logind[1680]: Removed session 26. Apr 12 18:24:17.945211 systemd[1]: Started sshd@26-172.31.30.133:22-139.178.89.65:44270.service. Apr 12 18:24:17.957200 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:24:17.957345 kernel: audit: type=1130 audit(1712946257.945:1596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.30.133:22-139.178.89.65:44270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:17.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.30.133:22-139.178.89.65:44270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:18.131000 audit[5492]: USER_ACCT pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:18.135226 sshd[5492]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:24:18.136178 sshd[5492]: Accepted publickey for core from 139.178.89.65 port 44270 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:24:18.133000 audit[5492]: CRED_ACQ pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:18.152808 kernel: audit: type=1101 audit(1712946258.131:1597): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:18.152979 kernel: audit: type=1103 audit(1712946258.133:1598): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:18.153040 kernel: audit: type=1006 audit(1712946258.133:1599): pid=5492 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Apr 12 18:24:18.133000 audit[5492]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6800860 a2=3 a3=1 items=0 ppid=1 pid=5492 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:18.169908 kernel: audit: type=1300 audit(1712946258.133:1599): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6800860 a2=3 a3=1 items=0 ppid=1 pid=5492 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:18.133000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:24:18.173453 kernel: audit: type=1327 audit(1712946258.133:1599): proctitle=737368643A20636F7265205B707269765D Apr 12 18:24:18.176648 systemd-logind[1680]: New session 27 of user core. Apr 12 18:24:18.179212 systemd[1]: Started session-27.scope. Apr 12 18:24:18.188000 audit[5492]: USER_START pid=5492 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:18.191000 audit[5494]: CRED_ACQ pid=5494 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:18.210666 kernel: audit: type=1105 audit(1712946258.188:1600): pid=5492 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:18.210768 kernel: audit: type=1103 audit(1712946258.191:1601): pid=5494 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:18.437242 sshd[5492]: pam_unix(sshd:session): session closed for user core Apr 12 18:24:18.439000 audit[5492]: USER_END pid=5492 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:18.439000 audit[5492]: CRED_DISP pid=5492 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:18.451535 kernel: audit: type=1106 audit(1712946258.439:1602): pid=5492 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:18.452070 systemd[1]: sshd@26-172.31.30.133:22-139.178.89.65:44270.service: Deactivated successfully. Apr 12 18:24:18.453395 systemd[1]: session-27.scope: Deactivated successfully. Apr 12 18:24:18.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.30.133:22-139.178.89.65:44270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:18.455561 systemd-logind[1680]: Session 27 logged out. Waiting for processes to exit. Apr 12 18:24:18.457384 systemd-logind[1680]: Removed session 27. Apr 12 18:24:18.462564 kernel: audit: type=1104 audit(1712946258.439:1603): pid=5492 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:23.467710 systemd[1]: Started sshd@27-172.31.30.133:22-139.178.89.65:44284.service. Apr 12 18:24:23.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.30.133:22-139.178.89.65:44284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:23.477697 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:24:23.477827 kernel: audit: type=1130 audit(1712946263.473:1605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.30.133:22-139.178.89.65:44284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:23.645000 audit[5513]: USER_ACCT pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:23.646126 sshd[5513]: Accepted publickey for core from 139.178.89.65 port 44284 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:24:23.649493 sshd[5513]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:24:23.648000 audit[5513]: CRED_ACQ pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:23.666369 kernel: audit: type=1101 audit(1712946263.645:1606): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:23.666606 kernel: audit: type=1103 audit(1712946263.648:1607): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:23.665065 systemd[1]: Started session-28.scope. Apr 12 18:24:23.669583 systemd-logind[1680]: New session 28 of user core. Apr 12 18:24:23.673197 kernel: audit: type=1006 audit(1712946263.648:1608): pid=5513 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Apr 12 18:24:23.648000 audit[5513]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe7bbf50 a2=3 a3=1 items=0 ppid=1 pid=5513 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:23.683757 kernel: audit: type=1300 audit(1712946263.648:1608): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe7bbf50 a2=3 a3=1 items=0 ppid=1 pid=5513 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:23.648000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:24:23.688036 kernel: audit: type=1327 audit(1712946263.648:1608): proctitle=737368643A20636F7265205B707269765D Apr 12 18:24:23.685000 audit[5513]: USER_START pid=5513 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:23.700479 kernel: audit: type=1105 audit(1712946263.685:1609): pid=5513 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:23.700000 audit[5516]: CRED_ACQ pid=5516 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:23.710729 kernel: audit: type=1103 audit(1712946263.700:1610): pid=5516 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:23.941638 sshd[5513]: pam_unix(sshd:session): session closed for user core Apr 12 18:24:23.943000 audit[5513]: USER_END pid=5513 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:23.947246 systemd-logind[1680]: Session 28 logged out. Waiting for processes to exit. Apr 12 18:24:23.949944 systemd[1]: session-28.scope: Deactivated successfully. Apr 12 18:24:23.952143 systemd-logind[1680]: Removed session 28. Apr 12 18:24:23.953718 systemd[1]: sshd@27-172.31.30.133:22-139.178.89.65:44284.service: Deactivated successfully. Apr 12 18:24:23.943000 audit[5513]: CRED_DISP pid=5513 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:23.964659 kernel: audit: type=1106 audit(1712946263.943:1611): pid=5513 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:23.964813 kernel: audit: type=1104 audit(1712946263.943:1612): pid=5513 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:23.949000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.30.133:22-139.178.89.65:44284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:27.836000 audit[5526]: NETFILTER_CFG table=filter:126 family=2 entries=9 op=nft_register_rule pid=5526 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:24:27.836000 audit[5526]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffeddfdbb0 a2=0 a3=1 items=0 ppid=2954 pid=5526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:27.836000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:24:27.840000 audit[5526]: NETFILTER_CFG table=nat:127 family=2 entries=51 op=nft_register_chain pid=5526 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:24:27.840000 audit[5526]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18564 a0=3 a1=ffffeddfdbb0 a2=0 a3=1 items=0 ppid=2954 pid=5526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:27.840000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:24:28.605088 systemd[1]: run-containerd-runc-k8s.io-b55e658cf5430a117918b3668c882c2e6cde09b8a031923d2296835ef3b19a80-runc.khPAo1.mount: Deactivated successfully. Apr 12 18:24:28.677755 kubelet[2815]: I0412 18:24:28.677662 2815 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-989fcbf57-zcpbl" podStartSLOduration=29.501125966 podCreationTimestamp="2024-04-12 18:23:56 +0000 UTC" firstStartedPulling="2024-04-12 18:23:59.040996111 +0000 UTC m=+112.776601925" lastFinishedPulling="2024-04-12 18:24:02.217447852 +0000 UTC m=+115.953053678" observedRunningTime="2024-04-12 18:24:03.299132618 +0000 UTC m=+117.034738432" watchObservedRunningTime="2024-04-12 18:24:28.677577719 +0000 UTC m=+142.413183557" Apr 12 18:24:28.711000 audit[5547]: NETFILTER_CFG table=filter:128 family=2 entries=8 op=nft_register_rule pid=5547 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:24:28.714545 kernel: kauditd_printk_skb: 7 callbacks suppressed Apr 12 18:24:28.714676 kernel: audit: type=1325 audit(1712946268.711:1616): table=filter:128 family=2 entries=8 op=nft_register_rule pid=5547 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:24:28.711000 audit[5547]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffe65cc420 a2=0 a3=1 items=0 ppid=2954 pid=5547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:28.731879 kernel: audit: type=1300 audit(1712946268.711:1616): arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffe65cc420 a2=0 a3=1 items=0 ppid=2954 pid=5547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:28.711000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:24:28.732661 kernel: audit: type=1327 audit(1712946268.711:1616): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:24:28.714000 audit[5547]: NETFILTER_CFG table=nat:129 family=2 entries=58 op=nft_register_chain pid=5547 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:24:28.743982 kernel: audit: type=1325 audit(1712946268.714:1617): table=nat:129 family=2 entries=58 op=nft_register_chain pid=5547 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:24:28.714000 audit[5547]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20452 a0=3 a1=ffffe65cc420 a2=0 a3=1 items=0 ppid=2954 pid=5547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:28.755603 kernel: audit: type=1300 audit(1712946268.714:1617): arch=c00000b7 syscall=211 success=yes exit=20452 a0=3 a1=ffffe65cc420 a2=0 a3=1 items=0 ppid=2954 pid=5547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:28.755742 kernel: audit: type=1327 audit(1712946268.714:1617): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:24:28.714000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:24:28.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.30.133:22-139.178.89.65:33082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:28.976746 systemd[1]: Started sshd@28-172.31.30.133:22-139.178.89.65:33082.service. Apr 12 18:24:28.986564 kernel: audit: type=1130 audit(1712946268.976:1618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.30.133:22-139.178.89.65:33082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:29.023315 systemd[1]: run-containerd-runc-k8s.io-c8381af262fb63792b56533a6be99959b5e531c9d7dde533d05b101f5c8fb259-runc.aNQm1i.mount: Deactivated successfully. Apr 12 18:24:29.174000 audit[5549]: USER_ACCT pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:29.174971 sshd[5549]: Accepted publickey for core from 139.178.89.65 port 33082 ssh2: RSA SHA256:RkreMDY4vm0NHGuZyACqO02N2uRrqppl3JmzNQboRtE Apr 12 18:24:29.186547 kernel: audit: type=1101 audit(1712946269.174:1619): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:29.187688 kernel: audit: type=1103 audit(1712946269.185:1620): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:29.185000 audit[5549]: CRED_ACQ pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:29.188644 sshd[5549]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:24:29.202136 kernel: audit: type=1006 audit(1712946269.186:1621): pid=5549 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Apr 12 18:24:29.186000 audit[5549]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef4419f0 a2=3 a3=1 items=0 ppid=1 pid=5549 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:29.186000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:24:29.208833 systemd-logind[1680]: New session 29 of user core. Apr 12 18:24:29.211681 systemd[1]: Started session-29.scope. Apr 12 18:24:29.220000 audit[5549]: USER_START pid=5549 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:29.223000 audit[5573]: CRED_ACQ pid=5573 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:29.473084 sshd[5549]: pam_unix(sshd:session): session closed for user core Apr 12 18:24:29.474000 audit[5549]: USER_END pid=5549 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:29.475000 audit[5549]: CRED_DISP pid=5549 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Apr 12 18:24:29.478718 systemd-logind[1680]: Session 29 logged out. Waiting for processes to exit. Apr 12 18:24:29.479304 systemd[1]: sshd@28-172.31.30.133:22-139.178.89.65:33082.service: Deactivated successfully. Apr 12 18:24:29.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.30.133:22-139.178.89.65:33082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:24:29.481294 systemd[1]: session-29.scope: Deactivated successfully. Apr 12 18:24:29.483226 systemd-logind[1680]: Removed session 29. Apr 12 18:24:43.663549 systemd[1]: cri-containerd-6a1b02d7d75e6c3c283b0174ab8cd7db4af13624ea6b83bce97db0095f09b0a2.scope: Deactivated successfully. Apr 12 18:24:43.664098 systemd[1]: cri-containerd-6a1b02d7d75e6c3c283b0174ab8cd7db4af13624ea6b83bce97db0095f09b0a2.scope: Consumed 11.309s CPU time. Apr 12 18:24:43.662000 audit: BPF prog-id=126 op=UNLOAD Apr 12 18:24:43.666639 kernel: kauditd_printk_skb: 7 callbacks suppressed Apr 12 18:24:43.666769 kernel: audit: type=1334 audit(1712946283.662:1627): prog-id=126 op=UNLOAD Apr 12 18:24:43.671000 audit: BPF prog-id=129 op=UNLOAD Apr 12 18:24:43.677568 kernel: audit: type=1334 audit(1712946283.671:1628): prog-id=129 op=UNLOAD Apr 12 18:24:43.704915 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6a1b02d7d75e6c3c283b0174ab8cd7db4af13624ea6b83bce97db0095f09b0a2-rootfs.mount: Deactivated successfully. Apr 12 18:24:43.706921 env[1688]: time="2024-04-12T18:24:43.706858093Z" level=info msg="shim disconnected" id=6a1b02d7d75e6c3c283b0174ab8cd7db4af13624ea6b83bce97db0095f09b0a2 Apr 12 18:24:43.707884 env[1688]: time="2024-04-12T18:24:43.707835273Z" level=warning msg="cleaning up after shim disconnected" id=6a1b02d7d75e6c3c283b0174ab8cd7db4af13624ea6b83bce97db0095f09b0a2 namespace=k8s.io Apr 12 18:24:43.707976 env[1688]: time="2024-04-12T18:24:43.707879937Z" level=info msg="cleaning up dead shim" Apr 12 18:24:43.722666 env[1688]: time="2024-04-12T18:24:43.722591730Z" level=warning msg="cleanup warnings time=\"2024-04-12T18:24:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5655 runtime=io.containerd.runc.v2\n" Apr 12 18:24:44.057726 systemd[1]: cri-containerd-4d873aac2ee79882782d5a7c05a005e1af0586d13ddb9e8cbb69da50a2846f65.scope: Deactivated successfully. Apr 12 18:24:44.058341 systemd[1]: cri-containerd-4d873aac2ee79882782d5a7c05a005e1af0586d13ddb9e8cbb69da50a2846f65.scope: Consumed 5.199s CPU time. Apr 12 18:24:44.060000 audit: BPF prog-id=93 op=UNLOAD Apr 12 18:24:44.060000 audit: BPF prog-id=114 op=UNLOAD Apr 12 18:24:44.067268 kernel: audit: type=1334 audit(1712946284.060:1629): prog-id=93 op=UNLOAD Apr 12 18:24:44.067428 kernel: audit: type=1334 audit(1712946284.060:1630): prog-id=114 op=UNLOAD Apr 12 18:24:44.102213 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4d873aac2ee79882782d5a7c05a005e1af0586d13ddb9e8cbb69da50a2846f65-rootfs.mount: Deactivated successfully. Apr 12 18:24:44.104356 env[1688]: time="2024-04-12T18:24:44.104296380Z" level=info msg="shim disconnected" id=4d873aac2ee79882782d5a7c05a005e1af0586d13ddb9e8cbb69da50a2846f65 Apr 12 18:24:44.104803 env[1688]: time="2024-04-12T18:24:44.104745957Z" level=warning msg="cleaning up after shim disconnected" id=4d873aac2ee79882782d5a7c05a005e1af0586d13ddb9e8cbb69da50a2846f65 namespace=k8s.io Apr 12 18:24:44.104960 env[1688]: time="2024-04-12T18:24:44.104931240Z" level=info msg="cleaning up dead shim" Apr 12 18:24:44.118945 env[1688]: time="2024-04-12T18:24:44.118886982Z" level=warning msg="cleanup warnings time=\"2024-04-12T18:24:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5681 runtime=io.containerd.runc.v2\n" Apr 12 18:24:44.390946 kubelet[2815]: I0412 18:24:44.390793 2815 scope.go:115] "RemoveContainer" containerID="6a1b02d7d75e6c3c283b0174ab8cd7db4af13624ea6b83bce97db0095f09b0a2" Apr 12 18:24:44.395635 env[1688]: time="2024-04-12T18:24:44.395549220Z" level=info msg="CreateContainer within sandbox \"f9bd66f1d8f07552e91fc0d0299a7dae92535e0911adfac5ab12b357bdc90f53\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Apr 12 18:24:44.396667 kubelet[2815]: I0412 18:24:44.396637 2815 scope.go:115] "RemoveContainer" containerID="4d873aac2ee79882782d5a7c05a005e1af0586d13ddb9e8cbb69da50a2846f65" Apr 12 18:24:44.402814 env[1688]: time="2024-04-12T18:24:44.402750037Z" level=info msg="CreateContainer within sandbox \"360cf59ed673f24babf63bd7ab9433605f6d73ae84ac726ca411133432bda634\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Apr 12 18:24:44.424788 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount98164253.mount: Deactivated successfully. Apr 12 18:24:44.438805 env[1688]: time="2024-04-12T18:24:44.438730616Z" level=info msg="CreateContainer within sandbox \"f9bd66f1d8f07552e91fc0d0299a7dae92535e0911adfac5ab12b357bdc90f53\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"4cacb88c79cd56e175583e485c6f7dd043884ad94d2d306723c78a047ef20d6b\"" Apr 12 18:24:44.439823 env[1688]: time="2024-04-12T18:24:44.439777229Z" level=info msg="StartContainer for \"4cacb88c79cd56e175583e485c6f7dd043884ad94d2d306723c78a047ef20d6b\"" Apr 12 18:24:44.458043 env[1688]: time="2024-04-12T18:24:44.457952868Z" level=info msg="CreateContainer within sandbox \"360cf59ed673f24babf63bd7ab9433605f6d73ae84ac726ca411133432bda634\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"c3386d897259fed5fd80915916f9df9f856ba0d123259767904e6c43cedd2b94\"" Apr 12 18:24:44.458893 env[1688]: time="2024-04-12T18:24:44.458833037Z" level=info msg="StartContainer for \"c3386d897259fed5fd80915916f9df9f856ba0d123259767904e6c43cedd2b94\"" Apr 12 18:24:44.486463 systemd[1]: Started cri-containerd-4cacb88c79cd56e175583e485c6f7dd043884ad94d2d306723c78a047ef20d6b.scope. Apr 12 18:24:44.508577 systemd[1]: Started cri-containerd-c3386d897259fed5fd80915916f9df9f856ba0d123259767904e6c43cedd2b94.scope. Apr 12 18:24:44.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.561660 kernel: audit: type=1400 audit(1712946284.544:1631): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.561902 kernel: audit: type=1400 audit(1712946284.544:1632): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.569451 kernel: audit: type=1400 audit(1712946284.544:1633): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.569645 kernel: audit: type=1400 audit(1712946284.544:1634): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.584836 kernel: audit: type=1400 audit(1712946284.544:1635): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.584929 kernel: audit: type=1400 audit(1712946284.544:1636): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.552000 audit: BPF prog-id=197 op=LOAD Apr 12 18:24:44.552000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.552000 audit[5705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3097 pid=5705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:44.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463616362383863373963643536653137353538336534383563366637 Apr 12 18:24:44.552000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.552000 audit[5705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3097 pid=5705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:44.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463616362383863373963643536653137353538336534383563366637 Apr 12 18:24:44.552000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.552000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.552000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.552000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.552000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.552000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.552000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.552000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.552000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.552000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.568000 audit: BPF prog-id=199 op=LOAD Apr 12 18:24:44.552000 audit: BPF prog-id=198 op=LOAD Apr 12 18:24:44.552000 audit[5705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3097 pid=5705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:44.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463616362383863373963643536653137353538336534383563366637 Apr 12 18:24:44.568000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.568000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.568000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.568000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.568000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.568000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.568000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.568000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.568000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.568000 audit: BPF prog-id=200 op=LOAD Apr 12 18:24:44.568000 audit[5705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3097 pid=5705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:44.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463616362383863373963643536653137353538336534383563366637 Apr 12 18:24:44.576000 audit: BPF prog-id=200 op=UNLOAD Apr 12 18:24:44.576000 audit: BPF prog-id=198 op=UNLOAD Apr 12 18:24:44.576000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.576000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.576000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.576000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.576000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.576000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.576000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.576000 audit[5705]: AVC avc: denied { perfmon } for pid=5705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.576000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.576000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.576000 audit[5705]: AVC avc: denied { bpf } for pid=5705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.576000 audit: BPF prog-id=201 op=LOAD Apr 12 18:24:44.576000 audit[5720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2443 pid=5720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:44.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333333836643839373235396665643566643830393135393136663964 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2443 pid=5720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:44.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333333836643839373235396665643566643830393135393136663964 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit: BPF prog-id=202 op=LOAD Apr 12 18:24:44.591000 audit[5720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2443 pid=5720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:44.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333333836643839373235396665643566643830393135393136663964 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit: BPF prog-id=203 op=LOAD Apr 12 18:24:44.591000 audit[5720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2443 pid=5720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:44.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333333836643839373235396665643566643830393135393136663964 Apr 12 18:24:44.591000 audit: BPF prog-id=203 op=UNLOAD Apr 12 18:24:44.591000 audit: BPF prog-id=202 op=UNLOAD Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:44.591000 audit: BPF prog-id=204 op=LOAD Apr 12 18:24:44.591000 audit[5720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2443 pid=5720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:44.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333333836643839373235396665643566643830393135393136663964 Apr 12 18:24:44.576000 audit[5705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3097 pid=5705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:44.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463616362383863373963643536653137353538336534383563366637 Apr 12 18:24:44.652409 env[1688]: time="2024-04-12T18:24:44.652248286Z" level=info msg="StartContainer for \"c3386d897259fed5fd80915916f9df9f856ba0d123259767904e6c43cedd2b94\" returns successfully" Apr 12 18:24:44.660550 env[1688]: time="2024-04-12T18:24:44.658261116Z" level=info msg="StartContainer for \"4cacb88c79cd56e175583e485c6f7dd043884ad94d2d306723c78a047ef20d6b\" returns successfully" Apr 12 18:24:48.523000 audit[5735]: AVC avc: denied { watch } for pid=5735 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:48.523000 audit[5735]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000f9e5a0 a2=fc6 a3=0 items=0 ppid=2443 pid=5735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:24:48.523000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:24:48.526000 audit[5735]: AVC avc: denied { watch } for pid=5735 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:24:48.526000 audit[5735]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40003cecf0 a2=fc6 a3=0 items=0 ppid=2443 pid=5735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c819 key=(null) Apr 12 18:24:48.526000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:24:48.887948 systemd[1]: cri-containerd-bcc7c350516fdd07abda8fed4d99d91cc00b688eb35766d3f7ff99e1c3b9ddc3.scope: Deactivated successfully. Apr 12 18:24:48.888525 systemd[1]: cri-containerd-bcc7c350516fdd07abda8fed4d99d91cc00b688eb35766d3f7ff99e1c3b9ddc3.scope: Consumed 2.910s CPU time. Apr 12 18:24:48.890000 audit: BPF prog-id=88 op=UNLOAD Apr 12 18:24:48.893979 kernel: kauditd_printk_skb: 114 callbacks suppressed Apr 12 18:24:48.894112 kernel: audit: type=1334 audit(1712946288.890:1669): prog-id=88 op=UNLOAD Apr 12 18:24:48.890000 audit: BPF prog-id=99 op=UNLOAD Apr 12 18:24:48.899314 kernel: audit: type=1334 audit(1712946288.890:1670): prog-id=99 op=UNLOAD Apr 12 18:24:48.931068 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bcc7c350516fdd07abda8fed4d99d91cc00b688eb35766d3f7ff99e1c3b9ddc3-rootfs.mount: Deactivated successfully. Apr 12 18:24:48.932290 env[1688]: time="2024-04-12T18:24:48.931209990Z" level=info msg="shim disconnected" id=bcc7c350516fdd07abda8fed4d99d91cc00b688eb35766d3f7ff99e1c3b9ddc3 Apr 12 18:24:48.932290 env[1688]: time="2024-04-12T18:24:48.931276027Z" level=warning msg="cleaning up after shim disconnected" id=bcc7c350516fdd07abda8fed4d99d91cc00b688eb35766d3f7ff99e1c3b9ddc3 namespace=k8s.io Apr 12 18:24:48.932290 env[1688]: time="2024-04-12T18:24:48.931297556Z" level=info msg="cleaning up dead shim" Apr 12 18:24:48.946481 env[1688]: time="2024-04-12T18:24:48.946406126Z" level=warning msg="cleanup warnings time=\"2024-04-12T18:24:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5783 runtime=io.containerd.runc.v2\n" Apr 12 18:24:49.388525 kubelet[2815]: E0412 18:24:49.388328 2815 controller.go:193] "Failed to update lease" err="Put \"https://172.31.30.133:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-133?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Apr 12 18:24:49.419456 kubelet[2815]: I0412 18:24:49.419402 2815 scope.go:115] "RemoveContainer" containerID="bcc7c350516fdd07abda8fed4d99d91cc00b688eb35766d3f7ff99e1c3b9ddc3" Apr 12 18:24:49.424493 env[1688]: time="2024-04-12T18:24:49.424424643Z" level=info msg="CreateContainer within sandbox \"4a9e8a2c608137a5c9886bead25696bf273771a4d15b03b1b265021e9767594f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Apr 12 18:24:49.456036 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount978736115.mount: Deactivated successfully. Apr 12 18:24:49.464391 env[1688]: time="2024-04-12T18:24:49.464325632Z" level=info msg="CreateContainer within sandbox \"4a9e8a2c608137a5c9886bead25696bf273771a4d15b03b1b265021e9767594f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"e39d1f28e21506f663ebdb3bfeeb8e1a6f7f7e09a8c89bac5f74c0fbdbcad8b5\"" Apr 12 18:24:49.465488 env[1688]: time="2024-04-12T18:24:49.465445231Z" level=info msg="StartContainer for \"e39d1f28e21506f663ebdb3bfeeb8e1a6f7f7e09a8c89bac5f74c0fbdbcad8b5\"" Apr 12 18:24:49.504808 systemd[1]: Started cri-containerd-e39d1f28e21506f663ebdb3bfeeb8e1a6f7f7e09a8c89bac5f74c0fbdbcad8b5.scope. Apr 12 18:24:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.549734 kernel: audit: type=1400 audit(1712946289.533:1671): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.549899 kernel: audit: type=1400 audit(1712946289.533:1672): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.558380 kernel: audit: type=1400 audit(1712946289.533:1673): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.558499 kernel: audit: type=1400 audit(1712946289.533:1674): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.573599 kernel: audit: type=1400 audit(1712946289.533:1675): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.581337 kernel: audit: type=1400 audit(1712946289.533:1676): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.589554 kernel: audit: type=1400 audit(1712946289.533:1677): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.597846 kernel: audit: type=1400 audit(1712946289.533:1678): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.541000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.541000 audit: BPF prog-id=205 op=LOAD Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2411 pid=5804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:49.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533396431663238653231353036663636336562646233626665656238 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2411 pid=5804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:49.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533396431663238653231353036663636336562646233626665656238 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit: BPF prog-id=206 op=LOAD Apr 12 18:24:49.548000 audit[5804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2411 pid=5804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:49.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533396431663238653231353036663636336562646233626665656238 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.548000 audit: BPF prog-id=207 op=LOAD Apr 12 18:24:49.548000 audit[5804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2411 pid=5804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:49.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533396431663238653231353036663636336562646233626665656238 Apr 12 18:24:49.549000 audit: BPF prog-id=207 op=UNLOAD Apr 12 18:24:49.549000 audit: BPF prog-id=206 op=UNLOAD Apr 12 18:24:49.549000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.549000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.549000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.549000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.549000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.549000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.549000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.549000 audit[5804]: AVC avc: denied { perfmon } for pid=5804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.549000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.549000 audit[5804]: AVC avc: denied { bpf } for pid=5804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:24:49.549000 audit: BPF prog-id=208 op=LOAD Apr 12 18:24:49.549000 audit[5804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2411 pid=5804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:24:49.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533396431663238653231353036663636336562646233626665656238 Apr 12 18:24:49.635197 env[1688]: time="2024-04-12T18:24:49.632811472Z" level=info msg="StartContainer for \"e39d1f28e21506f663ebdb3bfeeb8e1a6f7f7e09a8c89bac5f74c0fbdbcad8b5\" returns successfully" Apr 12 18:24:58.596693 systemd[1]: run-containerd-runc-k8s.io-b55e658cf5430a117918b3668c882c2e6cde09b8a031923d2296835ef3b19a80-runc.T5DwBv.mount: Deactivated successfully. Apr 12 18:24:59.004391 systemd[1]: run-containerd-runc-k8s.io-c8381af262fb63792b56533a6be99959b5e531c9d7dde533d05b101f5c8fb259-runc.HoKT8q.mount: Deactivated successfully. Apr 12 18:24:59.389789 kubelet[2815]: E0412 18:24:59.389348 2815 controller.go:193] "Failed to update lease" err="Put \"https://172.31.30.133:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-133?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Apr 12 18:25:02.320000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:25:02.323648 kernel: kauditd_printk_skb: 49 callbacks suppressed Apr 12 18:25:02.323735 kernel: audit: type=1400 audit(1712946302.320:1689): avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:25:02.320000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=f a1=400f9858c0 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:25:02.344931 kernel: audit: type=1300 audit(1712946302.320:1689): arch=c00000b7 syscall=27 success=no exit=-13 a0=f a1=400f9858c0 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:25:02.320000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:25:02.355834 kernel: audit: type=1327 audit(1712946302.320:1689): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:25:02.355967 kernel: audit: type=1400 audit(1712946302.336:1690): avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:25:02.336000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:25:02.336000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=f a1=4011b4f7d0 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:25:02.377692 kernel: audit: type=1300 audit(1712946302.336:1690): arch=c00000b7 syscall=27 success=no exit=-13 a0=f a1=4011b4f7d0 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:25:02.377839 kernel: audit: type=1327 audit(1712946302.336:1690): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:25:02.336000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:25:02.340000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:25:02.397668 kernel: audit: type=1400 audit(1712946302.340:1691): avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:25:02.397770 kernel: audit: type=1300 audit(1712946302.340:1691): arch=c00000b7 syscall=27 success=no exit=-13 a0=f a1=400f985b00 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:25:02.340000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=f a1=400f985b00 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:25:02.340000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:25:02.419756 kernel: audit: type=1327 audit(1712946302.340:1691): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:25:02.419973 kernel: audit: type=1400 audit(1712946302.340:1692): avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:25:02.340000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:25:02.340000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=f a1=40056f8da0 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:25:02.340000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:25:02.348000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:25:02.348000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=f a1=4011be9f60 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:25:02.348000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:25:02.513000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:25:02.513000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=12 a1=4011b4fa70 a2=fc6 a3=0 items=0 ppid=2444 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c461 key=(null) Apr 12 18:25:02.513000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Apr 12 18:25:04.727000 audit[5406]: AVC avc: denied { watch } for pid=5406 comm="apiserver" path="/calico-apiserver-certs/..2024_04_12_18_23_58.1053546144/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c393 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c393 tclass=file permissive=0 Apr 12 18:25:04.727000 audit[5406]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000bbdf20 a2=fc6 a3=0 items=0 ppid=5313 pid=5406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c393 key=(null) Apr 12 18:25:04.727000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274