Jul 2 08:56:10.989079 kernel: Linux version 5.15.161-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Jul 1 23:45:21 -00 2024 Jul 2 08:56:10.989126 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 08:56:10.989153 kernel: BIOS-provided physical RAM map: Jul 2 08:56:10.989171 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Jul 2 08:56:10.989187 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Jul 2 08:56:10.989203 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Jul 2 08:56:10.989222 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007ffdcfff] usable Jul 2 08:56:10.989239 kernel: BIOS-e820: [mem 0x000000007ffdd000-0x000000007fffffff] reserved Jul 2 08:56:10.989260 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Jul 2 08:56:10.989276 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Jul 2 08:56:10.989292 kernel: NX (Execute Disable) protection: active Jul 2 08:56:10.989308 kernel: SMBIOS 2.8 present. Jul 2 08:56:10.989325 kernel: DMI: OpenStack Foundation OpenStack Nova, BIOS 1.15.0-1 04/01/2014 Jul 2 08:56:10.989341 kernel: Hypervisor detected: KVM Jul 2 08:56:10.989361 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 2 08:56:10.989382 kernel: kvm-clock: cpu 0, msr 3f192001, primary cpu clock Jul 2 08:56:10.989400 kernel: kvm-clock: using sched offset of 5490441980 cycles Jul 2 08:56:10.989419 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 2 08:56:10.989437 kernel: tsc: Detected 1996.249 MHz processor Jul 2 08:56:10.989456 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 2 08:56:10.989475 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 2 08:56:10.989493 kernel: last_pfn = 0x7ffdd max_arch_pfn = 0x400000000 Jul 2 08:56:10.989511 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 2 08:56:10.989640 kernel: ACPI: Early table checksum verification disabled Jul 2 08:56:10.989660 kernel: ACPI: RSDP 0x00000000000F5930 000014 (v00 BOCHS ) Jul 2 08:56:10.989719 kernel: ACPI: RSDT 0x000000007FFE1848 000030 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 08:56:10.989739 kernel: ACPI: FACP 0x000000007FFE172C 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 08:56:10.989757 kernel: ACPI: DSDT 0x000000007FFE0040 0016EC (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 08:56:10.989775 kernel: ACPI: FACS 0x000000007FFE0000 000040 Jul 2 08:56:10.989793 kernel: ACPI: APIC 0x000000007FFE17A0 000080 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 08:56:10.989849 kernel: ACPI: WAET 0x000000007FFE1820 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 08:56:10.989867 kernel: ACPI: Reserving FACP table memory at [mem 0x7ffe172c-0x7ffe179f] Jul 2 08:56:10.989891 kernel: ACPI: Reserving DSDT table memory at [mem 0x7ffe0040-0x7ffe172b] Jul 2 08:56:10.989909 kernel: ACPI: Reserving FACS table memory at [mem 0x7ffe0000-0x7ffe003f] Jul 2 08:56:10.989927 kernel: ACPI: Reserving APIC table memory at [mem 0x7ffe17a0-0x7ffe181f] Jul 2 08:56:10.989978 kernel: ACPI: Reserving WAET table memory at [mem 0x7ffe1820-0x7ffe1847] Jul 2 08:56:10.989999 kernel: No NUMA configuration found Jul 2 08:56:10.990017 kernel: Faking a node at [mem 0x0000000000000000-0x000000007ffdcfff] Jul 2 08:56:10.990035 kernel: NODE_DATA(0) allocated [mem 0x7ffd7000-0x7ffdcfff] Jul 2 08:56:10.990088 kernel: Zone ranges: Jul 2 08:56:10.990118 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 2 08:56:10.990137 kernel: DMA32 [mem 0x0000000001000000-0x000000007ffdcfff] Jul 2 08:56:10.990191 kernel: Normal empty Jul 2 08:56:10.990211 kernel: Movable zone start for each node Jul 2 08:56:10.990262 kernel: Early memory node ranges Jul 2 08:56:10.990283 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Jul 2 08:56:10.990341 kernel: node 0: [mem 0x0000000000100000-0x000000007ffdcfff] Jul 2 08:56:10.990382 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007ffdcfff] Jul 2 08:56:10.990414 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 2 08:56:10.990466 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Jul 2 08:56:10.990485 kernel: On node 0, zone DMA32: 35 pages in unavailable ranges Jul 2 08:56:10.990613 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 2 08:56:10.990657 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 2 08:56:10.990688 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 2 08:56:10.990741 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 2 08:56:10.990766 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 2 08:56:10.990820 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 2 08:56:10.990894 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 2 08:56:10.990916 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 2 08:56:10.990983 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 2 08:56:10.991003 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Jul 2 08:56:10.991022 kernel: [mem 0x80000000-0xfeffbfff] available for PCI devices Jul 2 08:56:10.991072 kernel: Booting paravirtualized kernel on KVM Jul 2 08:56:10.991086 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 2 08:56:10.991131 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Jul 2 08:56:10.991151 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Jul 2 08:56:10.991196 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Jul 2 08:56:10.991210 kernel: pcpu-alloc: [0] 0 1 Jul 2 08:56:10.991255 kernel: kvm-guest: stealtime: cpu 0, msr 7dc1c0c0 Jul 2 08:56:10.991269 kernel: kvm-guest: PV spinlocks disabled, no host support Jul 2 08:56:10.991317 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515805 Jul 2 08:56:10.991339 kernel: Policy zone: DMA32 Jul 2 08:56:10.991356 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 08:56:10.991375 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 2 08:56:10.991389 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 2 08:56:10.991403 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Jul 2 08:56:10.991417 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 2 08:56:10.991432 kernel: Memory: 1973284K/2096620K available (12294K kernel code, 2276K rwdata, 13712K rodata, 47444K init, 4144K bss, 123076K reserved, 0K cma-reserved) Jul 2 08:56:10.991446 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Jul 2 08:56:10.991460 kernel: ftrace: allocating 34514 entries in 135 pages Jul 2 08:56:10.991474 kernel: ftrace: allocated 135 pages with 4 groups Jul 2 08:56:10.991491 kernel: rcu: Hierarchical RCU implementation. Jul 2 08:56:10.991506 kernel: rcu: RCU event tracing is enabled. Jul 2 08:56:10.991521 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Jul 2 08:56:10.991564 kernel: Rude variant of Tasks RCU enabled. Jul 2 08:56:10.991578 kernel: Tracing variant of Tasks RCU enabled. Jul 2 08:56:10.991592 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 2 08:56:10.991607 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Jul 2 08:56:10.991621 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Jul 2 08:56:10.991635 kernel: Console: colour VGA+ 80x25 Jul 2 08:56:10.991648 kernel: printk: console [tty0] enabled Jul 2 08:56:10.991666 kernel: printk: console [ttyS0] enabled Jul 2 08:56:10.991681 kernel: ACPI: Core revision 20210730 Jul 2 08:56:10.991695 kernel: APIC: Switch to symmetric I/O mode setup Jul 2 08:56:10.991709 kernel: x2apic enabled Jul 2 08:56:10.991723 kernel: Switched APIC routing to physical x2apic. Jul 2 08:56:10.991737 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 2 08:56:10.991751 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 2 08:56:10.991765 kernel: Calibrating delay loop (skipped) preset value.. 3992.49 BogoMIPS (lpj=1996249) Jul 2 08:56:10.991780 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Jul 2 08:56:10.991797 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Jul 2 08:56:10.991811 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 2 08:56:10.991826 kernel: Spectre V2 : Mitigation: Retpolines Jul 2 08:56:10.991840 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Jul 2 08:56:10.991854 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Jul 2 08:56:10.991868 kernel: Speculative Store Bypass: Vulnerable Jul 2 08:56:10.991882 kernel: x86/fpu: x87 FPU will use FXSAVE Jul 2 08:56:10.991896 kernel: Freeing SMP alternatives memory: 32K Jul 2 08:56:10.991910 kernel: pid_max: default: 32768 minimum: 301 Jul 2 08:56:10.991926 kernel: LSM: Security Framework initializing Jul 2 08:56:10.991940 kernel: SELinux: Initializing. Jul 2 08:56:10.991955 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 2 08:56:10.991969 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 2 08:56:10.991984 kernel: smpboot: CPU0: AMD Intel Core i7 9xx (Nehalem Class Core i7) (family: 0x6, model: 0x1a, stepping: 0x3) Jul 2 08:56:10.991998 kernel: Performance Events: AMD PMU driver. Jul 2 08:56:10.992012 kernel: ... version: 0 Jul 2 08:56:10.992026 kernel: ... bit width: 48 Jul 2 08:56:10.992040 kernel: ... generic registers: 4 Jul 2 08:56:10.992065 kernel: ... value mask: 0000ffffffffffff Jul 2 08:56:10.992080 kernel: ... max period: 00007fffffffffff Jul 2 08:56:10.992095 kernel: ... fixed-purpose events: 0 Jul 2 08:56:10.992112 kernel: ... event mask: 000000000000000f Jul 2 08:56:10.992127 kernel: signal: max sigframe size: 1440 Jul 2 08:56:10.992141 kernel: rcu: Hierarchical SRCU implementation. Jul 2 08:56:10.992156 kernel: smp: Bringing up secondary CPUs ... Jul 2 08:56:10.992171 kernel: x86: Booting SMP configuration: Jul 2 08:56:10.992188 kernel: .... node #0, CPUs: #1 Jul 2 08:56:10.992203 kernel: kvm-clock: cpu 1, msr 3f192041, secondary cpu clock Jul 2 08:56:10.992217 kernel: kvm-guest: stealtime: cpu 1, msr 7dd1c0c0 Jul 2 08:56:10.992232 kernel: smp: Brought up 1 node, 2 CPUs Jul 2 08:56:10.992247 kernel: smpboot: Max logical packages: 2 Jul 2 08:56:10.992261 kernel: smpboot: Total of 2 processors activated (7984.99 BogoMIPS) Jul 2 08:56:10.992276 kernel: devtmpfs: initialized Jul 2 08:56:10.992291 kernel: x86/mm: Memory block size: 128MB Jul 2 08:56:10.992306 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 2 08:56:10.992323 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Jul 2 08:56:10.992338 kernel: pinctrl core: initialized pinctrl subsystem Jul 2 08:56:10.992353 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 2 08:56:10.992368 kernel: audit: initializing netlink subsys (disabled) Jul 2 08:56:10.992383 kernel: audit: type=2000 audit(1719910570.545:1): state=initialized audit_enabled=0 res=1 Jul 2 08:56:10.992397 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 2 08:56:10.992412 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 2 08:56:10.992427 kernel: cpuidle: using governor menu Jul 2 08:56:10.992441 kernel: ACPI: bus type PCI registered Jul 2 08:56:10.992459 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 2 08:56:10.992474 kernel: dca service started, version 1.12.1 Jul 2 08:56:10.992489 kernel: PCI: Using configuration type 1 for base access Jul 2 08:56:10.992504 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 2 08:56:10.992519 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 2 08:56:10.992570 kernel: ACPI: Added _OSI(Module Device) Jul 2 08:56:10.992585 kernel: ACPI: Added _OSI(Processor Device) Jul 2 08:56:10.992599 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Jul 2 08:56:10.992614 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 2 08:56:10.992632 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 2 08:56:10.992647 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 2 08:56:10.992662 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 2 08:56:10.992677 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 2 08:56:10.992691 kernel: ACPI: Interpreter enabled Jul 2 08:56:10.992706 kernel: ACPI: PM: (supports S0 S3 S5) Jul 2 08:56:10.992720 kernel: ACPI: Using IOAPIC for interrupt routing Jul 2 08:56:10.992736 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 2 08:56:10.992750 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Jul 2 08:56:10.992768 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 2 08:56:10.993007 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Jul 2 08:56:10.993171 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Jul 2 08:56:10.993195 kernel: acpiphp: Slot [3] registered Jul 2 08:56:10.993210 kernel: acpiphp: Slot [4] registered Jul 2 08:56:10.993225 kernel: acpiphp: Slot [5] registered Jul 2 08:56:10.993240 kernel: acpiphp: Slot [6] registered Jul 2 08:56:10.993260 kernel: acpiphp: Slot [7] registered Jul 2 08:56:10.993274 kernel: acpiphp: Slot [8] registered Jul 2 08:56:10.993289 kernel: acpiphp: Slot [9] registered Jul 2 08:56:10.993303 kernel: acpiphp: Slot [10] registered Jul 2 08:56:10.993318 kernel: acpiphp: Slot [11] registered Jul 2 08:56:10.993333 kernel: acpiphp: Slot [12] registered Jul 2 08:56:10.993348 kernel: acpiphp: Slot [13] registered Jul 2 08:56:10.993362 kernel: acpiphp: Slot [14] registered Jul 2 08:56:10.993377 kernel: acpiphp: Slot [15] registered Jul 2 08:56:10.993391 kernel: acpiphp: Slot [16] registered Jul 2 08:56:10.993409 kernel: acpiphp: Slot [17] registered Jul 2 08:56:10.993423 kernel: acpiphp: Slot [18] registered Jul 2 08:56:10.993437 kernel: acpiphp: Slot [19] registered Jul 2 08:56:10.993452 kernel: acpiphp: Slot [20] registered Jul 2 08:56:10.993466 kernel: acpiphp: Slot [21] registered Jul 2 08:56:10.993481 kernel: acpiphp: Slot [22] registered Jul 2 08:56:10.993495 kernel: acpiphp: Slot [23] registered Jul 2 08:56:10.993510 kernel: acpiphp: Slot [24] registered Jul 2 08:56:10.993556 kernel: acpiphp: Slot [25] registered Jul 2 08:56:10.993576 kernel: acpiphp: Slot [26] registered Jul 2 08:56:10.993591 kernel: acpiphp: Slot [27] registered Jul 2 08:56:10.993606 kernel: acpiphp: Slot [28] registered Jul 2 08:56:10.993620 kernel: acpiphp: Slot [29] registered Jul 2 08:56:10.993635 kernel: acpiphp: Slot [30] registered Jul 2 08:56:10.993649 kernel: acpiphp: Slot [31] registered Jul 2 08:56:10.993664 kernel: PCI host bridge to bus 0000:00 Jul 2 08:56:10.993846 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 2 08:56:10.993989 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 2 08:56:10.994136 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 2 08:56:10.994273 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Jul 2 08:56:10.994411 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Jul 2 08:56:10.994579 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 2 08:56:10.994770 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Jul 2 08:56:10.994968 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Jul 2 08:56:10.995149 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Jul 2 08:56:10.995309 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc120-0xc12f] Jul 2 08:56:10.995468 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Jul 2 08:56:10.995657 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Jul 2 08:56:10.995819 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Jul 2 08:56:10.995936 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Jul 2 08:56:10.996029 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Jul 2 08:56:10.996119 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Jul 2 08:56:10.996204 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Jul 2 08:56:10.996301 kernel: pci 0000:00:02.0: [1af4:1050] type 00 class 0x030000 Jul 2 08:56:10.996387 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfe000000-0xfe7fffff pref] Jul 2 08:56:10.996474 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfe800000-0xfe803fff 64bit pref] Jul 2 08:56:11.004307 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfeb90000-0xfeb90fff] Jul 2 08:56:11.004413 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfeb80000-0xfeb8ffff pref] Jul 2 08:56:11.004502 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 2 08:56:11.004635 kernel: pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 Jul 2 08:56:11.004724 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc0bf] Jul 2 08:56:11.004810 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfeb91000-0xfeb91fff] Jul 2 08:56:11.004894 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe804000-0xfe807fff 64bit pref] Jul 2 08:56:11.004977 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfeb00000-0xfeb7ffff pref] Jul 2 08:56:11.005074 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Jul 2 08:56:11.005160 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Jul 2 08:56:11.005243 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfeb92000-0xfeb92fff] Jul 2 08:56:11.005327 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe808000-0xfe80bfff 64bit pref] Jul 2 08:56:11.005419 kernel: pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 Jul 2 08:56:11.005505 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0c0-0xc0ff] Jul 2 08:56:11.008640 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe80c000-0xfe80ffff 64bit pref] Jul 2 08:56:11.008745 kernel: pci 0000:00:06.0: [1af4:1005] type 00 class 0x00ff00 Jul 2 08:56:11.008833 kernel: pci 0000:00:06.0: reg 0x10: [io 0xc100-0xc11f] Jul 2 08:56:11.008919 kernel: pci 0000:00:06.0: reg 0x20: [mem 0xfe810000-0xfe813fff 64bit pref] Jul 2 08:56:11.008931 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 2 08:56:11.008940 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 2 08:56:11.008949 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 2 08:56:11.008957 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 2 08:56:11.008965 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Jul 2 08:56:11.008976 kernel: iommu: Default domain type: Translated Jul 2 08:56:11.008984 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 2 08:56:11.009066 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Jul 2 08:56:11.009151 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 2 08:56:11.009236 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Jul 2 08:56:11.009248 kernel: vgaarb: loaded Jul 2 08:56:11.009256 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 2 08:56:11.009264 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 2 08:56:11.009272 kernel: PTP clock support registered Jul 2 08:56:11.009284 kernel: PCI: Using ACPI for IRQ routing Jul 2 08:56:11.009292 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 2 08:56:11.009300 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Jul 2 08:56:11.009308 kernel: e820: reserve RAM buffer [mem 0x7ffdd000-0x7fffffff] Jul 2 08:56:11.009316 kernel: clocksource: Switched to clocksource kvm-clock Jul 2 08:56:11.009324 kernel: VFS: Disk quotas dquot_6.6.0 Jul 2 08:56:11.009332 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 2 08:56:11.009340 kernel: pnp: PnP ACPI init Jul 2 08:56:11.009427 kernel: pnp 00:03: [dma 2] Jul 2 08:56:11.009443 kernel: pnp: PnP ACPI: found 5 devices Jul 2 08:56:11.009452 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 2 08:56:11.009460 kernel: NET: Registered PF_INET protocol family Jul 2 08:56:11.009468 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 2 08:56:11.009477 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Jul 2 08:56:11.009485 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 2 08:56:11.009493 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Jul 2 08:56:11.009501 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Jul 2 08:56:11.009511 kernel: TCP: Hash tables configured (established 16384 bind 16384) Jul 2 08:56:11.009519 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 2 08:56:11.009557 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 2 08:56:11.009566 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 2 08:56:11.009574 kernel: NET: Registered PF_XDP protocol family Jul 2 08:56:11.009653 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 2 08:56:11.009732 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 2 08:56:11.009806 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 2 08:56:11.009881 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Jul 2 08:56:11.009961 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Jul 2 08:56:11.010047 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Jul 2 08:56:11.010133 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jul 2 08:56:11.010219 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Jul 2 08:56:11.010231 kernel: PCI: CLS 0 bytes, default 64 Jul 2 08:56:11.010239 kernel: Initialise system trusted keyrings Jul 2 08:56:11.010247 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Jul 2 08:56:11.010256 kernel: Key type asymmetric registered Jul 2 08:56:11.010268 kernel: Asymmetric key parser 'x509' registered Jul 2 08:56:11.010276 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 2 08:56:11.010285 kernel: io scheduler mq-deadline registered Jul 2 08:56:11.010292 kernel: io scheduler kyber registered Jul 2 08:56:11.010300 kernel: io scheduler bfq registered Jul 2 08:56:11.010308 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 2 08:56:11.010317 kernel: ACPI: \_SB_.LNKB: Enabled at IRQ 10 Jul 2 08:56:11.010326 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Jul 2 08:56:11.010334 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Jul 2 08:56:11.010344 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Jul 2 08:56:11.010352 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 2 08:56:11.010360 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 2 08:56:11.010369 kernel: random: crng init done Jul 2 08:56:11.010377 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 2 08:56:11.010385 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 2 08:56:11.010393 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 2 08:56:11.010477 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 2 08:56:11.010493 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 2 08:56:11.010600 kernel: rtc_cmos 00:04: registered as rtc0 Jul 2 08:56:11.010681 kernel: rtc_cmos 00:04: setting system clock to 2024-07-02T08:56:10 UTC (1719910570) Jul 2 08:56:11.010756 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram Jul 2 08:56:11.010768 kernel: NET: Registered PF_INET6 protocol family Jul 2 08:56:11.010776 kernel: Segment Routing with IPv6 Jul 2 08:56:11.010784 kernel: In-situ OAM (IOAM) with IPv6 Jul 2 08:56:11.010792 kernel: NET: Registered PF_PACKET protocol family Jul 2 08:56:11.010800 kernel: Key type dns_resolver registered Jul 2 08:56:11.010811 kernel: IPI shorthand broadcast: enabled Jul 2 08:56:11.010819 kernel: sched_clock: Marking stable (699213869, 119958861)->(851209434, -32036704) Jul 2 08:56:11.010837 kernel: registered taskstats version 1 Jul 2 08:56:11.010845 kernel: Loading compiled-in X.509 certificates Jul 2 08:56:11.010854 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.161-flatcar: a1ce693884775675566f1ed116e36d15950b9a42' Jul 2 08:56:11.010862 kernel: Key type .fscrypt registered Jul 2 08:56:11.010870 kernel: Key type fscrypt-provisioning registered Jul 2 08:56:11.010878 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 2 08:56:11.010888 kernel: ima: Allocated hash algorithm: sha1 Jul 2 08:56:11.010896 kernel: ima: No architecture policies found Jul 2 08:56:11.010904 kernel: clk: Disabling unused clocks Jul 2 08:56:11.010912 kernel: Freeing unused kernel image (initmem) memory: 47444K Jul 2 08:56:11.010920 kernel: Write protecting the kernel read-only data: 28672k Jul 2 08:56:11.010928 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 2 08:56:11.010936 kernel: Freeing unused kernel image (rodata/data gap) memory: 624K Jul 2 08:56:11.010944 kernel: Run /init as init process Jul 2 08:56:11.010951 kernel: with arguments: Jul 2 08:56:11.010959 kernel: /init Jul 2 08:56:11.010969 kernel: with environment: Jul 2 08:56:11.010977 kernel: HOME=/ Jul 2 08:56:11.010984 kernel: TERM=linux Jul 2 08:56:11.010992 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 2 08:56:11.011003 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 08:56:11.011014 systemd[1]: Detected virtualization kvm. Jul 2 08:56:11.011023 systemd[1]: Detected architecture x86-64. Jul 2 08:56:11.011034 systemd[1]: Running in initrd. Jul 2 08:56:11.011042 systemd[1]: No hostname configured, using default hostname. Jul 2 08:56:11.011051 systemd[1]: Hostname set to . Jul 2 08:56:11.011060 systemd[1]: Initializing machine ID from VM UUID. Jul 2 08:56:11.011069 systemd[1]: Queued start job for default target initrd.target. Jul 2 08:56:11.011078 systemd[1]: Started systemd-ask-password-console.path. Jul 2 08:56:11.011086 systemd[1]: Reached target cryptsetup.target. Jul 2 08:56:11.011095 systemd[1]: Reached target paths.target. Jul 2 08:56:11.011106 systemd[1]: Reached target slices.target. Jul 2 08:56:11.011114 systemd[1]: Reached target swap.target. Jul 2 08:56:11.011123 systemd[1]: Reached target timers.target. Jul 2 08:56:11.011132 systemd[1]: Listening on iscsid.socket. Jul 2 08:56:11.011140 systemd[1]: Listening on iscsiuio.socket. Jul 2 08:56:11.011149 systemd[1]: Listening on systemd-journald-audit.socket. Jul 2 08:56:11.011158 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 2 08:56:11.011166 systemd[1]: Listening on systemd-journald.socket. Jul 2 08:56:11.011177 systemd[1]: Listening on systemd-networkd.socket. Jul 2 08:56:11.011186 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 08:56:11.011195 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 08:56:11.011204 systemd[1]: Reached target sockets.target. Jul 2 08:56:11.011221 systemd[1]: Starting kmod-static-nodes.service... Jul 2 08:56:11.011231 systemd[1]: Finished network-cleanup.service. Jul 2 08:56:11.011242 systemd[1]: Starting systemd-fsck-usr.service... Jul 2 08:56:11.011251 systemd[1]: Starting systemd-journald.service... Jul 2 08:56:11.011259 systemd[1]: Starting systemd-modules-load.service... Jul 2 08:56:11.011268 systemd[1]: Starting systemd-resolved.service... Jul 2 08:56:11.011277 systemd[1]: Starting systemd-vconsole-setup.service... Jul 2 08:56:11.011286 systemd[1]: Finished kmod-static-nodes.service. Jul 2 08:56:11.011294 systemd[1]: Finished systemd-fsck-usr.service. Jul 2 08:56:11.011303 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 2 08:56:11.011316 systemd-journald[185]: Journal started Jul 2 08:56:11.011362 systemd-journald[185]: Runtime Journal (/run/log/journal/b0df5f4b63d645d29da1459615d606bb) is 4.9M, max 39.5M, 34.5M free. Jul 2 08:56:10.998888 systemd-modules-load[186]: Inserted module 'overlay' Jul 2 08:56:11.041782 systemd[1]: Started systemd-journald.service. Jul 2 08:56:11.041806 kernel: audit: type=1130 audit(1719910571.028:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.041819 kernel: audit: type=1130 audit(1719910571.028:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.041831 kernel: audit: type=1130 audit(1719910571.029:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.010519 systemd-resolved[187]: Positive Trust Anchors: Jul 2 08:56:11.046557 kernel: audit: type=1130 audit(1719910571.040:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.010551 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 08:56:11.010589 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 08:56:11.020406 systemd-resolved[187]: Defaulting to hostname 'linux'. Jul 2 08:56:11.028745 systemd[1]: Started systemd-resolved.service. Jul 2 08:56:11.029290 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 2 08:56:11.029817 systemd[1]: Reached target nss-lookup.target. Jul 2 08:56:11.030866 systemd[1]: Finished systemd-vconsole-setup.service. Jul 2 08:56:11.041955 systemd[1]: Starting dracut-cmdline-ask.service... Jul 2 08:56:11.058544 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 2 08:56:11.059371 systemd[1]: Finished dracut-cmdline-ask.service. Jul 2 08:56:11.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.060641 systemd[1]: Starting dracut-cmdline.service... Jul 2 08:56:11.065793 kernel: audit: type=1130 audit(1719910571.059:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.069857 dracut-cmdline[201]: dracut-dracut-053 Jul 2 08:56:11.070540 kernel: Bridge firewalling registered Jul 2 08:56:11.070571 systemd-modules-load[186]: Inserted module 'br_netfilter' Jul 2 08:56:11.071297 dracut-cmdline[201]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 08:56:11.094576 kernel: SCSI subsystem initialized Jul 2 08:56:11.109112 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 2 08:56:11.109156 kernel: device-mapper: uevent: version 1.0.3 Jul 2 08:56:11.110802 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 2 08:56:11.114369 systemd-modules-load[186]: Inserted module 'dm_multipath' Jul 2 08:56:11.115280 systemd[1]: Finished systemd-modules-load.service. Jul 2 08:56:11.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.116557 systemd[1]: Starting systemd-sysctl.service... Jul 2 08:56:11.121491 kernel: audit: type=1130 audit(1719910571.115:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.130962 systemd[1]: Finished systemd-sysctl.service. Jul 2 08:56:11.137043 kernel: audit: type=1130 audit(1719910571.130:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.137066 kernel: Loading iSCSI transport class v2.0-870. Jul 2 08:56:11.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.157774 kernel: iscsi: registered transport (tcp) Jul 2 08:56:11.185726 kernel: iscsi: registered transport (qla4xxx) Jul 2 08:56:11.185810 kernel: QLogic iSCSI HBA Driver Jul 2 08:56:11.238705 systemd[1]: Finished dracut-cmdline.service. Jul 2 08:56:11.249872 kernel: audit: type=1130 audit(1719910571.238:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.240160 systemd[1]: Starting dracut-pre-udev.service... Jul 2 08:56:11.297630 kernel: raid6: sse2x4 gen() 12958 MB/s Jul 2 08:56:11.314623 kernel: raid6: sse2x4 xor() 7330 MB/s Jul 2 08:56:11.331621 kernel: raid6: sse2x2 gen() 14649 MB/s Jul 2 08:56:11.348621 kernel: raid6: sse2x2 xor() 8371 MB/s Jul 2 08:56:11.365617 kernel: raid6: sse2x1 gen() 11299 MB/s Jul 2 08:56:11.383414 kernel: raid6: sse2x1 xor() 6889 MB/s Jul 2 08:56:11.383483 kernel: raid6: using algorithm sse2x2 gen() 14649 MB/s Jul 2 08:56:11.383511 kernel: raid6: .... xor() 8371 MB/s, rmw enabled Jul 2 08:56:11.384235 kernel: raid6: using ssse3x2 recovery algorithm Jul 2 08:56:11.400184 kernel: xor: measuring software checksum speed Jul 2 08:56:11.400282 kernel: prefetch64-sse : 18491 MB/sec Jul 2 08:56:11.402515 kernel: generic_sse : 16836 MB/sec Jul 2 08:56:11.402602 kernel: xor: using function: prefetch64-sse (18491 MB/sec) Jul 2 08:56:11.522627 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 2 08:56:11.538643 systemd[1]: Finished dracut-pre-udev.service. Jul 2 08:56:11.548336 kernel: audit: type=1130 audit(1719910571.538:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.539000 audit: BPF prog-id=7 op=LOAD Jul 2 08:56:11.539000 audit: BPF prog-id=8 op=LOAD Jul 2 08:56:11.540133 systemd[1]: Starting systemd-udevd.service... Jul 2 08:56:11.564718 systemd-udevd[383]: Using default interface naming scheme 'v252'. Jul 2 08:56:11.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.569686 systemd[1]: Started systemd-udevd.service. Jul 2 08:56:11.574763 systemd[1]: Starting dracut-pre-trigger.service... Jul 2 08:56:11.589719 dracut-pre-trigger[400]: rd.md=0: removing MD RAID activation Jul 2 08:56:11.637226 systemd[1]: Finished dracut-pre-trigger.service. Jul 2 08:56:11.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.640696 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 08:56:11.689000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:11.688872 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 08:56:11.746867 kernel: virtio_blk virtio2: [vda] 41943040 512-byte logical blocks (21.5 GB/20.0 GiB) Jul 2 08:56:11.762680 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 2 08:56:11.762722 kernel: GPT:17805311 != 41943039 Jul 2 08:56:11.762739 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 2 08:56:11.763776 kernel: GPT:17805311 != 41943039 Jul 2 08:56:11.765415 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 2 08:56:11.765437 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 08:56:11.781602 kernel: libata version 3.00 loaded. Jul 2 08:56:11.793548 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (441) Jul 2 08:56:11.797630 kernel: ata_piix 0000:00:01.1: version 2.13 Jul 2 08:56:11.804646 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 2 08:56:11.844048 kernel: scsi host0: ata_piix Jul 2 08:56:11.844262 kernel: scsi host1: ata_piix Jul 2 08:56:11.844376 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc120 irq 14 Jul 2 08:56:11.844390 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc128 irq 15 Jul 2 08:56:11.845057 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 2 08:56:11.849384 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 2 08:56:11.853651 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 2 08:56:11.857858 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 08:56:11.860561 systemd[1]: Starting disk-uuid.service... Jul 2 08:56:11.875130 disk-uuid[460]: Primary Header is updated. Jul 2 08:56:11.875130 disk-uuid[460]: Secondary Entries is updated. Jul 2 08:56:11.875130 disk-uuid[460]: Secondary Header is updated. Jul 2 08:56:11.883573 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 08:56:11.898734 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 08:56:12.910573 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 08:56:12.911500 disk-uuid[461]: The operation has completed successfully. Jul 2 08:56:12.976186 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 2 08:56:12.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:12.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:12.976419 systemd[1]: Finished disk-uuid.service. Jul 2 08:56:12.998669 systemd[1]: Starting verity-setup.service... Jul 2 08:56:13.034615 kernel: device-mapper: verity: sha256 using implementation "sha256-ssse3" Jul 2 08:56:13.140710 systemd[1]: Found device dev-mapper-usr.device. Jul 2 08:56:13.143755 systemd[1]: Mounting sysusr-usr.mount... Jul 2 08:56:13.145295 systemd[1]: Finished verity-setup.service. Jul 2 08:56:13.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:13.289601 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 2 08:56:13.290637 systemd[1]: Mounted sysusr-usr.mount. Jul 2 08:56:13.292047 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 2 08:56:13.293894 systemd[1]: Starting ignition-setup.service... Jul 2 08:56:13.296722 systemd[1]: Starting parse-ip-for-networkd.service... Jul 2 08:56:13.310809 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 2 08:56:13.310872 kernel: BTRFS info (device vda6): using free space tree Jul 2 08:56:13.310886 kernel: BTRFS info (device vda6): has skinny extents Jul 2 08:56:13.334466 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 2 08:56:13.362166 systemd[1]: Finished ignition-setup.service. Jul 2 08:56:13.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:13.363444 systemd[1]: Starting ignition-fetch-offline.service... Jul 2 08:56:13.431000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:13.432000 audit: BPF prog-id=9 op=LOAD Jul 2 08:56:13.431571 systemd[1]: Finished parse-ip-for-networkd.service. Jul 2 08:56:13.433448 systemd[1]: Starting systemd-networkd.service... Jul 2 08:56:13.463902 systemd-networkd[631]: lo: Link UP Jul 2 08:56:13.464680 systemd-networkd[631]: lo: Gained carrier Jul 2 08:56:13.466005 systemd-networkd[631]: Enumeration completed Jul 2 08:56:13.466607 systemd[1]: Started systemd-networkd.service. Jul 2 08:56:13.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:13.467131 systemd[1]: Reached target network.target. Jul 2 08:56:13.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:13.468296 systemd[1]: Starting iscsiuio.service... Jul 2 08:56:13.469129 systemd-networkd[631]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 08:56:13.475345 systemd-networkd[631]: eth0: Link UP Jul 2 08:56:13.485866 iscsid[636]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 2 08:56:13.485866 iscsid[636]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Jul 2 08:56:13.485866 iscsid[636]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 2 08:56:13.485866 iscsid[636]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 2 08:56:13.485866 iscsid[636]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 2 08:56:13.485866 iscsid[636]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 2 08:56:13.485866 iscsid[636]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 2 08:56:13.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:13.475354 systemd-networkd[631]: eth0: Gained carrier Jul 2 08:56:13.476415 systemd[1]: Started iscsiuio.service. Jul 2 08:56:13.477796 systemd[1]: Starting iscsid.service... Jul 2 08:56:13.483487 systemd[1]: Started iscsid.service. Jul 2 08:56:13.488890 systemd[1]: Starting dracut-initqueue.service... Jul 2 08:56:13.500597 systemd-networkd[631]: eth0: DHCPv4 address 172.24.4.229/24, gateway 172.24.4.1 acquired from 172.24.4.1 Jul 2 08:56:13.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:13.505698 systemd[1]: Finished dracut-initqueue.service. Jul 2 08:56:13.506228 systemd[1]: Reached target remote-fs-pre.target. Jul 2 08:56:13.506672 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 08:56:13.507140 systemd[1]: Reached target remote-fs.target. Jul 2 08:56:13.508401 systemd[1]: Starting dracut-pre-mount.service... Jul 2 08:56:13.520240 systemd[1]: Finished dracut-pre-mount.service. Jul 2 08:56:13.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:13.696818 ignition[579]: Ignition 2.14.0 Jul 2 08:56:13.696831 ignition[579]: Stage: fetch-offline Jul 2 08:56:13.696887 ignition[579]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:56:13.699000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:13.699416 systemd[1]: Finished ignition-fetch-offline.service. Jul 2 08:56:13.696912 ignition[579]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:56:13.700965 systemd[1]: Starting ignition-fetch.service... Jul 2 08:56:13.697958 ignition[579]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:56:13.698052 ignition[579]: parsed url from cmdline: "" Jul 2 08:56:13.698056 ignition[579]: no config URL provided Jul 2 08:56:13.698062 ignition[579]: reading system config file "/usr/lib/ignition/user.ign" Jul 2 08:56:13.698070 ignition[579]: no config at "/usr/lib/ignition/user.ign" Jul 2 08:56:13.698075 ignition[579]: failed to fetch config: resource requires networking Jul 2 08:56:13.698457 ignition[579]: Ignition finished successfully Jul 2 08:56:13.720917 ignition[655]: Ignition 2.14.0 Jul 2 08:56:13.720942 ignition[655]: Stage: fetch Jul 2 08:56:13.721170 ignition[655]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:56:13.721212 ignition[655]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:56:13.723475 ignition[655]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:56:13.723740 ignition[655]: parsed url from cmdline: "" Jul 2 08:56:13.723750 ignition[655]: no config URL provided Jul 2 08:56:13.723764 ignition[655]: reading system config file "/usr/lib/ignition/user.ign" Jul 2 08:56:13.723783 ignition[655]: no config at "/usr/lib/ignition/user.ign" Jul 2 08:56:13.726053 ignition[655]: config drive ("/dev/disk/by-label/config-2") not found. Waiting... Jul 2 08:56:13.726080 ignition[655]: config drive ("/dev/disk/by-label/CONFIG-2") not found. Waiting... Jul 2 08:56:13.728250 ignition[655]: GET http://169.254.169.254/openstack/latest/user_data: attempt #1 Jul 2 08:56:14.045971 ignition[655]: GET result: OK Jul 2 08:56:14.046162 ignition[655]: parsing config with SHA512: 527787df0bc51548ba9e52d756fbb2b5360e0c44253e9c4649e0da3e7ace765db4d71e6d9ea821bdbf3027253ce1eef055b99c7d49b25b6689ce115ebd0c8bf8 Jul 2 08:56:14.062927 unknown[655]: fetched base config from "system" Jul 2 08:56:14.062957 unknown[655]: fetched base config from "system" Jul 2 08:56:14.064018 ignition[655]: fetch: fetch complete Jul 2 08:56:14.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:14.062972 unknown[655]: fetched user config from "openstack" Jul 2 08:56:14.064031 ignition[655]: fetch: fetch passed Jul 2 08:56:14.066975 systemd[1]: Finished ignition-fetch.service. Jul 2 08:56:14.064111 ignition[655]: Ignition finished successfully Jul 2 08:56:14.069983 systemd[1]: Starting ignition-kargs.service... Jul 2 08:56:14.090638 ignition[661]: Ignition 2.14.0 Jul 2 08:56:14.090668 ignition[661]: Stage: kargs Jul 2 08:56:14.090932 ignition[661]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:56:14.090976 ignition[661]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:56:14.103808 systemd[1]: Finished ignition-kargs.service. Jul 2 08:56:14.093210 ignition[661]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:56:14.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:14.095904 ignition[661]: kargs: kargs passed Jul 2 08:56:14.106383 systemd[1]: Starting ignition-disks.service... Jul 2 08:56:14.095997 ignition[661]: Ignition finished successfully Jul 2 08:56:14.124204 ignition[667]: Ignition 2.14.0 Jul 2 08:56:14.124230 ignition[667]: Stage: disks Jul 2 08:56:14.124475 ignition[667]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:56:14.124519 ignition[667]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:56:14.126800 ignition[667]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:56:14.129339 ignition[667]: disks: disks passed Jul 2 08:56:14.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:14.131004 systemd[1]: Finished ignition-disks.service. Jul 2 08:56:14.129431 ignition[667]: Ignition finished successfully Jul 2 08:56:14.132607 systemd[1]: Reached target initrd-root-device.target. Jul 2 08:56:14.134509 systemd[1]: Reached target local-fs-pre.target. Jul 2 08:56:14.136762 systemd[1]: Reached target local-fs.target. Jul 2 08:56:14.138893 systemd[1]: Reached target sysinit.target. Jul 2 08:56:14.141089 systemd[1]: Reached target basic.target. Jul 2 08:56:14.145007 systemd[1]: Starting systemd-fsck-root.service... Jul 2 08:56:14.177513 systemd-fsck[675]: ROOT: clean, 614/1628000 files, 124057/1617920 blocks Jul 2 08:56:14.193254 systemd[1]: Finished systemd-fsck-root.service. Jul 2 08:56:14.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:14.196696 systemd[1]: Mounting sysroot.mount... Jul 2 08:56:14.215590 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 2 08:56:14.216964 systemd[1]: Mounted sysroot.mount. Jul 2 08:56:14.219371 systemd[1]: Reached target initrd-root-fs.target. Jul 2 08:56:14.224293 systemd[1]: Mounting sysroot-usr.mount... Jul 2 08:56:14.226221 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 2 08:56:14.227729 systemd[1]: Starting flatcar-openstack-hostname.service... Jul 2 08:56:14.229450 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 2 08:56:14.229524 systemd[1]: Reached target ignition-diskful.target. Jul 2 08:56:14.240012 systemd[1]: Mounted sysroot-usr.mount. Jul 2 08:56:14.249289 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 08:56:14.254036 systemd[1]: Starting initrd-setup-root.service... Jul 2 08:56:14.270717 initrd-setup-root[687]: cut: /sysroot/etc/passwd: No such file or directory Jul 2 08:56:14.282891 initrd-setup-root[695]: cut: /sysroot/etc/group: No such file or directory Jul 2 08:56:14.290286 initrd-setup-root[703]: cut: /sysroot/etc/shadow: No such file or directory Jul 2 08:56:14.291991 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/vda6 scanned by mount (682) Jul 2 08:56:14.297671 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 2 08:56:14.297700 kernel: BTRFS info (device vda6): using free space tree Jul 2 08:56:14.297712 kernel: BTRFS info (device vda6): has skinny extents Jul 2 08:56:14.300390 initrd-setup-root[727]: cut: /sysroot/etc/gshadow: No such file or directory Jul 2 08:56:14.312929 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 08:56:14.370097 systemd[1]: Finished initrd-setup-root.service. Jul 2 08:56:14.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:14.371433 systemd[1]: Starting ignition-mount.service... Jul 2 08:56:14.376686 systemd[1]: Starting sysroot-boot.service... Jul 2 08:56:14.387452 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Jul 2 08:56:14.387716 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Jul 2 08:56:14.431905 ignition[750]: INFO : Ignition 2.14.0 Jul 2 08:56:14.432703 ignition[750]: INFO : Stage: mount Jul 2 08:56:14.433347 ignition[750]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:56:14.434112 ignition[750]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:56:14.444911 ignition[750]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:56:14.449874 ignition[750]: INFO : mount: mount passed Jul 2 08:56:14.450471 ignition[750]: INFO : Ignition finished successfully Jul 2 08:56:14.451450 systemd[1]: Finished sysroot-boot.service. Jul 2 08:56:14.452705 coreos-metadata[681]: Jul 02 08:56:14.452 INFO Fetching http://169.254.169.254/latest/meta-data/hostname: Attempt #1 Jul 2 08:56:14.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:14.454618 systemd[1]: Finished ignition-mount.service. Jul 2 08:56:14.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:14.474108 coreos-metadata[681]: Jul 02 08:56:14.474 INFO Fetch successful Jul 2 08:56:14.474829 coreos-metadata[681]: Jul 02 08:56:14.474 INFO wrote hostname ci-3510-3-5-e-e1038c2d1d.novalocal to /sysroot/etc/hostname Jul 2 08:56:14.478910 systemd[1]: flatcar-openstack-hostname.service: Deactivated successfully. Jul 2 08:56:14.479013 systemd[1]: Finished flatcar-openstack-hostname.service. Jul 2 08:56:14.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:14.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:14.481081 systemd[1]: Starting ignition-files.service... Jul 2 08:56:14.488198 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 08:56:14.496562 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/vda6 scanned by mount (758) Jul 2 08:56:14.500472 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 2 08:56:14.500508 kernel: BTRFS info (device vda6): using free space tree Jul 2 08:56:14.500520 kernel: BTRFS info (device vda6): has skinny extents Jul 2 08:56:14.509977 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 08:56:14.529330 ignition[777]: INFO : Ignition 2.14.0 Jul 2 08:56:14.529330 ignition[777]: INFO : Stage: files Jul 2 08:56:14.530491 ignition[777]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:56:14.530491 ignition[777]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:56:14.532272 ignition[777]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:56:14.535440 ignition[777]: DEBUG : files: compiled without relabeling support, skipping Jul 2 08:56:14.536724 ignition[777]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 2 08:56:14.536724 ignition[777]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 2 08:56:14.541878 ignition[777]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 2 08:56:14.542790 ignition[777]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 2 08:56:14.544074 unknown[777]: wrote ssh authorized keys file for user: core Jul 2 08:56:14.544826 ignition[777]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 2 08:56:14.545556 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 2 08:56:14.545556 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Jul 2 08:56:14.626732 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 2 08:56:14.935714 systemd-networkd[631]: eth0: Gained IPv6LL Jul 2 08:56:14.955718 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 2 08:56:14.955718 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 2 08:56:14.960145 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 2 08:56:14.960145 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 2 08:56:14.960145 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 2 08:56:14.960145 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 08:56:14.960145 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 08:56:14.960145 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 08:56:14.960145 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 08:56:14.986722 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 08:56:14.988822 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 08:56:14.988822 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.29.2-x86-64.raw" Jul 2 08:56:14.988822 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.29.2-x86-64.raw" Jul 2 08:56:14.988822 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.29.2-x86-64.raw" Jul 2 08:56:14.988822 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.29.2-x86-64.raw: attempt #1 Jul 2 08:56:15.547696 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 2 08:56:17.298640 ignition[777]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.29.2-x86-64.raw" Jul 2 08:56:17.298640 ignition[777]: INFO : files: op(b): [started] processing unit "coreos-metadata-sshkeys@.service" Jul 2 08:56:17.298640 ignition[777]: INFO : files: op(b): [finished] processing unit "coreos-metadata-sshkeys@.service" Jul 2 08:56:17.298640 ignition[777]: INFO : files: op(c): [started] processing unit "prepare-helm.service" Jul 2 08:56:17.334396 ignition[777]: INFO : files: op(c): op(d): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 08:56:17.371898 ignition[777]: INFO : files: op(c): op(d): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 08:56:17.373170 ignition[777]: INFO : files: op(c): [finished] processing unit "prepare-helm.service" Jul 2 08:56:17.373170 ignition[777]: INFO : files: op(e): [started] setting preset to enabled for "prepare-helm.service" Jul 2 08:56:17.376070 ignition[777]: INFO : files: op(e): [finished] setting preset to enabled for "prepare-helm.service" Jul 2 08:56:17.376070 ignition[777]: INFO : files: op(f): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 2 08:56:17.376070 ignition[777]: INFO : files: op(f): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 2 08:56:17.404796 ignition[777]: INFO : files: createResultFile: createFiles: op(10): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 2 08:56:17.406882 ignition[777]: INFO : files: createResultFile: createFiles: op(10): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 2 08:56:17.406882 ignition[777]: INFO : files: files passed Jul 2 08:56:17.406882 ignition[777]: INFO : Ignition finished successfully Jul 2 08:56:17.426521 kernel: kauditd_printk_skb: 26 callbacks suppressed Jul 2 08:56:17.426741 kernel: audit: type=1130 audit(1719910577.412:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.407451 systemd[1]: Finished ignition-files.service. Jul 2 08:56:17.418326 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 2 08:56:17.427780 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 2 08:56:17.429484 systemd[1]: Starting ignition-quench.service... Jul 2 08:56:17.500267 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 2 08:56:17.500478 systemd[1]: Finished ignition-quench.service. Jul 2 08:56:17.520002 kernel: audit: type=1130 audit(1719910577.502:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.520068 kernel: audit: type=1131 audit(1719910577.502:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.589141 initrd-setup-root-after-ignition[802]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 2 08:56:17.590471 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 2 08:56:17.602271 kernel: audit: type=1130 audit(1719910577.592:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.592861 systemd[1]: Reached target ignition-complete.target. Jul 2 08:56:17.605112 systemd[1]: Starting initrd-parse-etc.service... Jul 2 08:56:17.637621 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 2 08:56:17.637843 systemd[1]: Finished initrd-parse-etc.service. Jul 2 08:56:17.658177 kernel: audit: type=1130 audit(1719910577.639:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.658247 kernel: audit: type=1131 audit(1719910577.639:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.640699 systemd[1]: Reached target initrd-fs.target. Jul 2 08:56:17.659216 systemd[1]: Reached target initrd.target. Jul 2 08:56:17.661509 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 2 08:56:17.663342 systemd[1]: Starting dracut-pre-pivot.service... Jul 2 08:56:17.692630 systemd[1]: Finished dracut-pre-pivot.service. Jul 2 08:56:17.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.696868 systemd[1]: Starting initrd-cleanup.service... Jul 2 08:56:17.706468 kernel: audit: type=1130 audit(1719910577.693:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.721052 systemd[1]: Stopped target nss-lookup.target. Jul 2 08:56:17.722158 systemd[1]: Stopped target remote-cryptsetup.target. Jul 2 08:56:17.723819 systemd[1]: Stopped target timers.target. Jul 2 08:56:17.725511 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 2 08:56:17.737404 kernel: audit: type=1131 audit(1719910577.726:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.725644 systemd[1]: Stopped dracut-pre-pivot.service. Jul 2 08:56:17.727366 systemd[1]: Stopped target initrd.target. Jul 2 08:56:17.737908 systemd[1]: Stopped target basic.target. Jul 2 08:56:17.739657 systemd[1]: Stopped target ignition-complete.target. Jul 2 08:56:17.741207 systemd[1]: Stopped target ignition-diskful.target. Jul 2 08:56:17.742721 systemd[1]: Stopped target initrd-root-device.target. Jul 2 08:56:17.744394 systemd[1]: Stopped target remote-fs.target. Jul 2 08:56:17.745985 systemd[1]: Stopped target remote-fs-pre.target. Jul 2 08:56:17.747778 systemd[1]: Stopped target sysinit.target. Jul 2 08:56:17.749350 systemd[1]: Stopped target local-fs.target. Jul 2 08:56:17.750927 systemd[1]: Stopped target local-fs-pre.target. Jul 2 08:56:17.752559 systemd[1]: Stopped target swap.target. Jul 2 08:56:17.764557 kernel: audit: type=1131 audit(1719910577.755:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.753991 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 2 08:56:17.754140 systemd[1]: Stopped dracut-pre-mount.service. Jul 2 08:56:17.770236 kernel: audit: type=1131 audit(1719910577.765:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.755770 systemd[1]: Stopped target cryptsetup.target. Jul 2 08:56:17.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.765035 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 2 08:56:17.771000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.765176 systemd[1]: Stopped dracut-initqueue.service. Jul 2 08:56:17.766515 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 2 08:56:17.766686 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 2 08:56:17.770901 systemd[1]: ignition-files.service: Deactivated successfully. Jul 2 08:56:17.771052 systemd[1]: Stopped ignition-files.service. Jul 2 08:56:17.772774 systemd[1]: Stopping ignition-mount.service... Jul 2 08:56:17.780731 systemd[1]: Stopping iscsid.service... Jul 2 08:56:17.783319 iscsid[636]: iscsid shutting down. Jul 2 08:56:17.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.782884 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 2 08:56:17.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.790890 ignition[815]: INFO : Ignition 2.14.0 Jul 2 08:56:17.790890 ignition[815]: INFO : Stage: umount Jul 2 08:56:17.790890 ignition[815]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:56:17.790890 ignition[815]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:56:17.790890 ignition[815]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:56:17.799000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.783111 systemd[1]: Stopped kmod-static-nodes.service. Jul 2 08:56:17.803607 ignition[815]: INFO : umount: umount passed Jul 2 08:56:17.803607 ignition[815]: INFO : Ignition finished successfully Jul 2 08:56:17.784943 systemd[1]: Stopping sysroot-boot.service... Jul 2 08:56:17.789146 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 2 08:56:17.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.789286 systemd[1]: Stopped systemd-udev-trigger.service. Jul 2 08:56:17.789849 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 2 08:56:17.789951 systemd[1]: Stopped dracut-pre-trigger.service. Jul 2 08:56:17.792410 systemd[1]: iscsid.service: Deactivated successfully. Jul 2 08:56:17.792584 systemd[1]: Stopped iscsid.service. Jul 2 08:56:17.800717 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 2 08:56:17.800809 systemd[1]: Stopped ignition-mount.service. Jul 2 08:56:17.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.805048 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 2 08:56:17.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.805223 systemd[1]: Finished initrd-cleanup.service. Jul 2 08:56:17.820000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.814356 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 2 08:56:17.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.814455 systemd[1]: Stopped ignition-disks.service. Jul 2 08:56:17.816318 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 2 08:56:17.816403 systemd[1]: Stopped ignition-kargs.service. Jul 2 08:56:17.819311 systemd[1]: ignition-fetch.service: Deactivated successfully. Jul 2 08:56:17.819386 systemd[1]: Stopped ignition-fetch.service. Jul 2 08:56:17.821122 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 2 08:56:17.821213 systemd[1]: Stopped ignition-fetch-offline.service. Jul 2 08:56:17.822866 systemd[1]: Stopped target paths.target. Jul 2 08:56:17.824266 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 2 08:56:17.827772 systemd[1]: Stopped systemd-ask-password-console.path. Jul 2 08:56:17.832268 systemd[1]: Stopped target slices.target. Jul 2 08:56:17.833874 systemd[1]: Stopped target sockets.target. Jul 2 08:56:17.835542 systemd[1]: iscsid.socket: Deactivated successfully. Jul 2 08:56:17.835585 systemd[1]: Closed iscsid.socket. Jul 2 08:56:17.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.837246 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 2 08:56:17.837321 systemd[1]: Stopped ignition-setup.service. Jul 2 08:56:17.839858 systemd[1]: Stopping iscsiuio.service... Jul 2 08:56:17.847000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.846620 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 2 08:56:17.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.847058 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 2 08:56:17.847159 systemd[1]: Stopped iscsiuio.service. Jul 2 08:56:17.848632 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 2 08:56:17.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.848719 systemd[1]: Stopped sysroot-boot.service. Jul 2 08:56:17.849624 systemd[1]: Stopped target network.target. Jul 2 08:56:17.850398 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 2 08:56:17.850429 systemd[1]: Closed iscsiuio.socket. Jul 2 08:56:17.851304 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 2 08:56:17.851344 systemd[1]: Stopped initrd-setup-root.service. Jul 2 08:56:17.852596 systemd[1]: Stopping systemd-networkd.service... Jul 2 08:56:17.853267 systemd[1]: Stopping systemd-resolved.service... Jul 2 08:56:17.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.856570 systemd-networkd[631]: eth0: DHCPv6 lease lost Jul 2 08:56:17.857620 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 2 08:56:17.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.862000 audit: BPF prog-id=9 op=UNLOAD Jul 2 08:56:17.857710 systemd[1]: Stopped systemd-networkd.service. Jul 2 08:56:17.860808 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 2 08:56:17.864000 audit: BPF prog-id=6 op=UNLOAD Jul 2 08:56:17.860907 systemd[1]: Stopped systemd-resolved.service. Jul 2 08:56:17.862839 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 2 08:56:17.862883 systemd[1]: Closed systemd-networkd.socket. Jul 2 08:56:17.864344 systemd[1]: Stopping network-cleanup.service... Jul 2 08:56:17.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.866687 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 2 08:56:17.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.866739 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 2 08:56:17.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.867702 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 2 08:56:17.867748 systemd[1]: Stopped systemd-sysctl.service. Jul 2 08:56:17.869384 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 2 08:56:17.869453 systemd[1]: Stopped systemd-modules-load.service. Jul 2 08:56:17.872329 systemd[1]: Stopping systemd-udevd.service... Jul 2 08:56:17.878402 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 2 08:56:17.881229 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 2 08:56:17.882103 systemd[1]: Stopped network-cleanup.service. Jul 2 08:56:17.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.884561 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 2 08:56:17.884709 systemd[1]: Stopped systemd-udevd.service. Jul 2 08:56:17.885000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.886619 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 2 08:56:17.886676 systemd[1]: Closed systemd-udevd-control.socket. Jul 2 08:56:17.887191 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 2 08:56:17.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.887233 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 2 08:56:17.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.888329 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 2 08:56:17.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.888368 systemd[1]: Stopped dracut-pre-udev.service. Jul 2 08:56:17.889326 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 2 08:56:17.889363 systemd[1]: Stopped dracut-cmdline.service. Jul 2 08:56:17.890468 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 2 08:56:17.890503 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 2 08:56:17.892279 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 2 08:56:17.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.896032 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 2 08:56:17.896092 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 2 08:56:17.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.898000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:17.898664 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 2 08:56:17.898758 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 2 08:56:17.899324 systemd[1]: Reached target initrd-switch-root.target. Jul 2 08:56:17.900596 systemd[1]: Starting initrd-switch-root.service... Jul 2 08:56:17.918975 systemd[1]: Switching root. Jul 2 08:56:17.941848 systemd-journald[185]: Journal stopped Jul 2 08:56:22.487825 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Jul 2 08:56:22.487879 kernel: SELinux: Class mctp_socket not defined in policy. Jul 2 08:56:22.487895 kernel: SELinux: Class anon_inode not defined in policy. Jul 2 08:56:22.487907 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 2 08:56:22.487919 kernel: SELinux: policy capability network_peer_controls=1 Jul 2 08:56:22.487934 kernel: SELinux: policy capability open_perms=1 Jul 2 08:56:22.487948 kernel: SELinux: policy capability extended_socket_class=1 Jul 2 08:56:22.487959 kernel: SELinux: policy capability always_check_network=0 Jul 2 08:56:22.487971 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 2 08:56:22.487982 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 2 08:56:22.487997 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 2 08:56:22.488009 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 2 08:56:22.488021 systemd[1]: Successfully loaded SELinux policy in 96.284ms. Jul 2 08:56:22.488042 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 21.570ms. Jul 2 08:56:22.488058 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 08:56:22.488070 systemd[1]: Detected virtualization kvm. Jul 2 08:56:22.488082 systemd[1]: Detected architecture x86-64. Jul 2 08:56:22.488094 systemd[1]: Detected first boot. Jul 2 08:56:22.488107 systemd[1]: Hostname set to . Jul 2 08:56:22.488125 systemd[1]: Initializing machine ID from VM UUID. Jul 2 08:56:22.488137 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 2 08:56:22.488149 systemd[1]: Populated /etc with preset unit settings. Jul 2 08:56:22.488164 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 08:56:22.488177 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 08:56:22.488191 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 08:56:22.488204 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 2 08:56:22.488216 systemd[1]: Stopped initrd-switch-root.service. Jul 2 08:56:22.488229 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 2 08:56:22.488245 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 2 08:56:22.488257 systemd[1]: Created slice system-addon\x2drun.slice. Jul 2 08:56:22.488269 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Jul 2 08:56:22.488280 systemd[1]: Created slice system-getty.slice. Jul 2 08:56:22.488291 systemd[1]: Created slice system-modprobe.slice. Jul 2 08:56:22.488303 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 2 08:56:22.488315 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 2 08:56:22.488327 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 2 08:56:22.488338 systemd[1]: Created slice user.slice. Jul 2 08:56:22.488352 systemd[1]: Started systemd-ask-password-console.path. Jul 2 08:56:22.488367 systemd[1]: Started systemd-ask-password-wall.path. Jul 2 08:56:22.488378 systemd[1]: Set up automount boot.automount. Jul 2 08:56:22.488391 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 2 08:56:22.488403 systemd[1]: Stopped target initrd-switch-root.target. Jul 2 08:56:22.488414 systemd[1]: Stopped target initrd-fs.target. Jul 2 08:56:22.488426 systemd[1]: Stopped target initrd-root-fs.target. Jul 2 08:56:22.488439 systemd[1]: Reached target integritysetup.target. Jul 2 08:56:22.488452 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 08:56:22.488464 systemd[1]: Reached target remote-fs.target. Jul 2 08:56:22.488476 systemd[1]: Reached target slices.target. Jul 2 08:56:22.488487 systemd[1]: Reached target swap.target. Jul 2 08:56:22.488499 systemd[1]: Reached target torcx.target. Jul 2 08:56:22.488510 systemd[1]: Reached target veritysetup.target. Jul 2 08:56:22.488522 systemd[1]: Listening on systemd-coredump.socket. Jul 2 08:56:22.488562 systemd[1]: Listening on systemd-initctl.socket. Jul 2 08:56:22.488578 systemd[1]: Listening on systemd-networkd.socket. Jul 2 08:56:22.488589 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 08:56:22.488601 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 08:56:22.488622 systemd[1]: Listening on systemd-userdbd.socket. Jul 2 08:56:22.488634 systemd[1]: Mounting dev-hugepages.mount... Jul 2 08:56:22.488646 systemd[1]: Mounting dev-mqueue.mount... Jul 2 08:56:22.488657 systemd[1]: Mounting media.mount... Jul 2 08:56:22.488669 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 08:56:22.488683 systemd[1]: Mounting sys-kernel-debug.mount... Jul 2 08:56:22.488696 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 2 08:56:22.488708 systemd[1]: Mounting tmp.mount... Jul 2 08:56:22.488719 systemd[1]: Starting flatcar-tmpfiles.service... Jul 2 08:56:22.488731 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 08:56:22.488742 systemd[1]: Starting kmod-static-nodes.service... Jul 2 08:56:22.488753 systemd[1]: Starting modprobe@configfs.service... Jul 2 08:56:22.488765 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 08:56:22.488776 systemd[1]: Starting modprobe@drm.service... Jul 2 08:56:22.488787 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 08:56:22.488801 systemd[1]: Starting modprobe@fuse.service... Jul 2 08:56:22.488813 systemd[1]: Starting modprobe@loop.service... Jul 2 08:56:22.488824 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 2 08:56:22.488836 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 2 08:56:22.488848 systemd[1]: Stopped systemd-fsck-root.service. Jul 2 08:56:22.488863 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 2 08:56:22.488875 systemd[1]: Stopped systemd-fsck-usr.service. Jul 2 08:56:22.488886 systemd[1]: Stopped systemd-journald.service. Jul 2 08:56:22.488901 systemd[1]: Starting systemd-journald.service... Jul 2 08:56:22.488914 systemd[1]: Starting systemd-modules-load.service... Jul 2 08:56:22.488926 systemd[1]: Starting systemd-network-generator.service... Jul 2 08:56:22.488940 systemd[1]: Starting systemd-remount-fs.service... Jul 2 08:56:22.488952 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 08:56:22.488964 systemd[1]: verity-setup.service: Deactivated successfully. Jul 2 08:56:22.488975 systemd[1]: Stopped verity-setup.service. Jul 2 08:56:22.488987 kernel: kauditd_printk_skb: 67 callbacks suppressed Jul 2 08:56:22.488998 kernel: audit: type=1131 audit(1719910582.427:107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.489010 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 08:56:22.489023 systemd[1]: Mounted dev-hugepages.mount. Jul 2 08:56:22.489035 systemd[1]: Mounted dev-mqueue.mount. Jul 2 08:56:22.489046 systemd[1]: Mounted media.mount. Jul 2 08:56:22.489058 systemd[1]: Mounted sys-kernel-debug.mount. Jul 2 08:56:22.489069 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 2 08:56:22.489080 systemd[1]: Mounted tmp.mount. Jul 2 08:56:22.489091 kernel: loop: module loaded Jul 2 08:56:22.489102 systemd[1]: Finished kmod-static-nodes.service. Jul 2 08:56:22.489114 kernel: audit: type=1305 audit(1719910582.484:108): op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 2 08:56:22.489128 kernel: audit: type=1300 audit(1719910582.484:108): arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffe8b8dad50 a2=4000 a3=7ffe8b8dadec items=0 ppid=1 pid=910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:22.489139 kernel: audit: type=1327 audit(1719910582.484:108): proctitle="/usr/lib/systemd/systemd-journald" Jul 2 08:56:22.489153 systemd-journald[910]: Journal started Jul 2 08:56:22.489196 systemd-journald[910]: Runtime Journal (/run/log/journal/b0df5f4b63d645d29da1459615d606bb) is 4.9M, max 39.5M, 34.5M free. Jul 2 08:56:18.243000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 2 08:56:18.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 08:56:18.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 08:56:18.372000 audit: BPF prog-id=10 op=LOAD Jul 2 08:56:18.372000 audit: BPF prog-id=10 op=UNLOAD Jul 2 08:56:18.372000 audit: BPF prog-id=11 op=LOAD Jul 2 08:56:18.372000 audit: BPF prog-id=11 op=UNLOAD Jul 2 08:56:18.533000 audit[848]: AVC avc: denied { associate } for pid=848 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 2 08:56:18.533000 audit[848]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001178d2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=831 pid=848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:18.533000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 08:56:18.538000 audit[848]: AVC avc: denied { associate } for pid=848 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 2 08:56:18.538000 audit[848]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001179a9 a2=1ed a3=0 items=2 ppid=831 pid=848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:18.538000 audit: CWD cwd="/" Jul 2 08:56:18.538000 audit: PATH item=0 name=(null) inode=2 dev=00:1a mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:18.538000 audit: PATH item=1 name=(null) inode=3 dev=00:1a mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:18.538000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 08:56:22.150000 audit: BPF prog-id=12 op=LOAD Jul 2 08:56:22.150000 audit: BPF prog-id=3 op=UNLOAD Jul 2 08:56:22.151000 audit: BPF prog-id=13 op=LOAD Jul 2 08:56:22.151000 audit: BPF prog-id=14 op=LOAD Jul 2 08:56:22.151000 audit: BPF prog-id=4 op=UNLOAD Jul 2 08:56:22.151000 audit: BPF prog-id=5 op=UNLOAD Jul 2 08:56:22.152000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.156000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.159000 audit: BPF prog-id=12 op=UNLOAD Jul 2 08:56:22.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.325000 audit: BPF prog-id=15 op=LOAD Jul 2 08:56:22.325000 audit: BPF prog-id=16 op=LOAD Jul 2 08:56:22.325000 audit: BPF prog-id=17 op=LOAD Jul 2 08:56:22.325000 audit: BPF prog-id=13 op=UNLOAD Jul 2 08:56:22.325000 audit: BPF prog-id=14 op=UNLOAD Jul 2 08:56:22.427000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.484000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 2 08:56:22.484000 audit[910]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffe8b8dad50 a2=4000 a3=7ffe8b8dadec items=0 ppid=1 pid=910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:22.484000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 2 08:56:22.146906 systemd[1]: Queued start job for default target multi-user.target. Jul 2 08:56:18.527633 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 08:56:22.146936 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 2 08:56:18.528619 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 08:56:22.153103 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 2 08:56:18.528669 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 08:56:18.528732 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 2 08:56:18.528758 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 2 08:56:18.528822 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 2 08:56:18.528853 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 2 08:56:18.529273 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 2 08:56:18.529363 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 08:56:18.529398 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 08:56:18.532262 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 2 08:56:18.532350 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 2 08:56:18.532399 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.5: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.5 Jul 2 08:56:18.532439 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 2 08:56:18.532483 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.5: no such file or directory" path=/var/lib/torcx/store/3510.3.5 Jul 2 08:56:18.532520 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:18Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 2 08:56:21.477001 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:21Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 08:56:21.482367 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:21Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 08:56:21.482669 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:21Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 08:56:21.482918 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:21Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 08:56:21.482981 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:21Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 2 08:56:21.483062 /usr/lib/systemd/system-generators/torcx-generator[848]: time="2024-07-02T08:56:21Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 2 08:56:22.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.505862 kernel: audit: type=1130 audit(1719910582.500:109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.505904 systemd[1]: Started systemd-journald.service. Jul 2 08:56:22.510749 kernel: audit: type=1130 audit(1719910582.505:110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.507015 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 2 08:56:22.507136 systemd[1]: Finished modprobe@configfs.service. Jul 2 08:56:22.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.511413 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 08:56:22.511521 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 08:56:22.515610 kernel: audit: type=1130 audit(1719910582.510:111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.515648 kernel: audit: type=1131 audit(1719910582.510:112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.520210 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 08:56:22.520386 systemd[1]: Finished modprobe@drm.service. Jul 2 08:56:22.519000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.528774 kernel: audit: type=1130 audit(1719910582.519:113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.528809 kernel: audit: type=1131 audit(1719910582.519:114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.531258 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 08:56:22.531489 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 08:56:22.532240 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 08:56:22.532419 systemd[1]: Finished modprobe@loop.service. Jul 2 08:56:22.533167 systemd[1]: Finished systemd-network-generator.service. Jul 2 08:56:22.533937 systemd[1]: Finished systemd-remount-fs.service. Jul 2 08:56:22.534980 systemd[1]: Reached target network-pre.target. Jul 2 08:56:22.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.531000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.537092 systemd[1]: Mounting sys-kernel-config.mount... Jul 2 08:56:22.541035 kernel: fuse: init (API version 7.34) Jul 2 08:56:22.540608 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 2 08:56:22.572619 systemd[1]: Starting systemd-hwdb-update.service... Jul 2 08:56:22.574143 systemd[1]: Starting systemd-journal-flush.service... Jul 2 08:56:22.574672 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 08:56:22.575610 systemd[1]: Starting systemd-random-seed.service... Jul 2 08:56:22.576096 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 08:56:22.577439 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 2 08:56:22.579573 systemd[1]: Finished modprobe@fuse.service. Jul 2 08:56:22.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.580164 systemd[1]: Mounted sys-kernel-config.mount. Jul 2 08:56:22.585410 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 2 08:56:22.588898 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 2 08:56:22.599000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.599267 systemd[1]: Finished systemd-modules-load.service. Jul 2 08:56:22.600782 systemd[1]: Starting systemd-sysctl.service... Jul 2 08:56:22.630244 systemd-journald[910]: Time spent on flushing to /var/log/journal/b0df5f4b63d645d29da1459615d606bb is 26.526ms for 1097 entries. Jul 2 08:56:22.630244 systemd-journald[910]: System Journal (/var/log/journal/b0df5f4b63d645d29da1459615d606bb) is 8.0M, max 584.8M, 576.8M free. Jul 2 08:56:22.711874 systemd-journald[910]: Received client request to flush runtime journal. Jul 2 08:56:22.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.682000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.641313 systemd[1]: Finished flatcar-tmpfiles.service. Jul 2 08:56:22.642966 systemd[1]: Starting systemd-sysusers.service... Jul 2 08:56:22.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:22.713565 udevadm[956]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 2 08:56:22.646994 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 08:56:22.648512 systemd[1]: Starting systemd-udev-settle.service... Jul 2 08:56:22.682095 systemd[1]: Finished systemd-random-seed.service. Jul 2 08:56:22.682749 systemd[1]: Reached target first-boot-complete.target. Jul 2 08:56:22.694584 systemd[1]: Finished systemd-sysctl.service. Jul 2 08:56:22.712819 systemd[1]: Finished systemd-journal-flush.service. Jul 2 08:56:22.719186 systemd[1]: Finished systemd-sysusers.service. Jul 2 08:56:22.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:23.331827 systemd[1]: Finished systemd-hwdb-update.service. Jul 2 08:56:23.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:23.333000 audit: BPF prog-id=18 op=LOAD Jul 2 08:56:23.334000 audit: BPF prog-id=19 op=LOAD Jul 2 08:56:23.334000 audit: BPF prog-id=7 op=UNLOAD Jul 2 08:56:23.334000 audit: BPF prog-id=8 op=UNLOAD Jul 2 08:56:23.335853 systemd[1]: Starting systemd-udevd.service... Jul 2 08:56:23.380268 systemd-udevd[959]: Using default interface naming scheme 'v252'. Jul 2 08:56:23.437049 systemd[1]: Started systemd-udevd.service. Jul 2 08:56:23.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:23.442000 audit: BPF prog-id=20 op=LOAD Jul 2 08:56:23.444808 systemd[1]: Starting systemd-networkd.service... Jul 2 08:56:23.468000 audit: BPF prog-id=21 op=LOAD Jul 2 08:56:23.469000 audit: BPF prog-id=22 op=LOAD Jul 2 08:56:23.469000 audit: BPF prog-id=23 op=LOAD Jul 2 08:56:23.471814 systemd[1]: Starting systemd-userdbd.service... Jul 2 08:56:23.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:23.510358 systemd[1]: Started systemd-userdbd.service. Jul 2 08:56:23.520086 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 2 08:56:23.592569 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Jul 2 08:56:23.597021 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 08:56:23.599561 kernel: ACPI: button: Power Button [PWRF] Jul 2 08:56:23.617631 systemd-networkd[969]: lo: Link UP Jul 2 08:56:23.617640 systemd-networkd[969]: lo: Gained carrier Jul 2 08:56:23.618657 systemd-networkd[969]: Enumeration completed Jul 2 08:56:23.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:23.618753 systemd[1]: Started systemd-networkd.service. Jul 2 08:56:23.618762 systemd-networkd[969]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 08:56:23.620834 systemd-networkd[969]: eth0: Link UP Jul 2 08:56:23.620843 systemd-networkd[969]: eth0: Gained carrier Jul 2 08:56:23.632693 systemd-networkd[969]: eth0: DHCPv4 address 172.24.4.229/24, gateway 172.24.4.1 acquired from 172.24.4.1 Jul 2 08:56:23.641000 audit[964]: AVC avc: denied { confidentiality } for pid=964 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 2 08:56:23.641000 audit[964]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=560c159b9ab0 a1=3207c a2=7fa234310bc5 a3=5 items=108 ppid=959 pid=964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:23.641000 audit: CWD cwd="/" Jul 2 08:56:23.641000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=1 name=(null) inode=14060 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=2 name=(null) inode=14060 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=3 name=(null) inode=14061 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=4 name=(null) inode=14060 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=5 name=(null) inode=14062 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=6 name=(null) inode=14060 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=7 name=(null) inode=14063 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=8 name=(null) inode=14063 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=9 name=(null) inode=14064 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=10 name=(null) inode=14063 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=11 name=(null) inode=14065 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=12 name=(null) inode=14063 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=13 name=(null) inode=14066 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=14 name=(null) inode=14063 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=15 name=(null) inode=14067 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=16 name=(null) inode=14063 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=17 name=(null) inode=14068 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=18 name=(null) inode=14060 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=19 name=(null) inode=14069 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=20 name=(null) inode=14069 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=21 name=(null) inode=14070 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=22 name=(null) inode=14069 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=23 name=(null) inode=14071 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=24 name=(null) inode=14069 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=25 name=(null) inode=14072 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=26 name=(null) inode=14069 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=27 name=(null) inode=14073 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=28 name=(null) inode=14069 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=29 name=(null) inode=14074 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=30 name=(null) inode=14060 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=31 name=(null) inode=14075 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=32 name=(null) inode=14075 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=33 name=(null) inode=14076 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=34 name=(null) inode=14075 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=35 name=(null) inode=14077 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=36 name=(null) inode=14075 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.660663 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Jul 2 08:56:23.641000 audit: PATH item=37 name=(null) inode=14078 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=38 name=(null) inode=14075 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=39 name=(null) inode=14079 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=40 name=(null) inode=14075 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=41 name=(null) inode=14080 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=42 name=(null) inode=14060 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=43 name=(null) inode=14081 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=44 name=(null) inode=14081 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=45 name=(null) inode=14082 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=46 name=(null) inode=14081 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=47 name=(null) inode=14083 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=48 name=(null) inode=14081 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=49 name=(null) inode=14084 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=50 name=(null) inode=14081 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=51 name=(null) inode=14085 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=52 name=(null) inode=14081 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=53 name=(null) inode=14086 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=55 name=(null) inode=14087 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=56 name=(null) inode=14087 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=57 name=(null) inode=14088 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=58 name=(null) inode=14087 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=59 name=(null) inode=14089 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=60 name=(null) inode=14087 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=61 name=(null) inode=14090 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=62 name=(null) inode=14090 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=63 name=(null) inode=14091 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=64 name=(null) inode=14090 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=65 name=(null) inode=14092 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=66 name=(null) inode=14090 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=67 name=(null) inode=14093 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=68 name=(null) inode=14090 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=69 name=(null) inode=14094 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=70 name=(null) inode=14090 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=71 name=(null) inode=14095 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=72 name=(null) inode=14087 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=73 name=(null) inode=14096 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=74 name=(null) inode=14096 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=75 name=(null) inode=14097 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=76 name=(null) inode=14096 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=77 name=(null) inode=14098 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=78 name=(null) inode=14096 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=79 name=(null) inode=14099 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=80 name=(null) inode=14096 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=81 name=(null) inode=14100 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=82 name=(null) inode=14096 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=83 name=(null) inode=14101 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=84 name=(null) inode=14087 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=85 name=(null) inode=14102 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=86 name=(null) inode=14102 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=87 name=(null) inode=14103 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=88 name=(null) inode=14102 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=89 name=(null) inode=14104 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=90 name=(null) inode=14102 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=91 name=(null) inode=14105 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=92 name=(null) inode=14102 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=93 name=(null) inode=14106 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=94 name=(null) inode=14102 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=95 name=(null) inode=14107 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=96 name=(null) inode=14087 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=97 name=(null) inode=14108 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=98 name=(null) inode=14108 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=99 name=(null) inode=14109 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=100 name=(null) inode=14108 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=101 name=(null) inode=14110 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=102 name=(null) inode=14108 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=103 name=(null) inode=14111 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=104 name=(null) inode=14108 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=105 name=(null) inode=14112 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=106 name=(null) inode=14108 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PATH item=107 name=(null) inode=14113 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:56:23.641000 audit: PROCTITLE proctitle="(udev-worker)" Jul 2 08:56:23.673578 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input4 Jul 2 08:56:23.678571 kernel: mousedev: PS/2 mouse device common for all mice Jul 2 08:56:23.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:23.717009 systemd[1]: Finished systemd-udev-settle.service. Jul 2 08:56:23.718681 systemd[1]: Starting lvm2-activation-early.service... Jul 2 08:56:23.750834 lvm[988]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 08:56:23.778414 systemd[1]: Finished lvm2-activation-early.service. Jul 2 08:56:23.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:23.779044 systemd[1]: Reached target cryptsetup.target. Jul 2 08:56:23.780598 systemd[1]: Starting lvm2-activation.service... Jul 2 08:56:23.788609 lvm[989]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 08:56:23.829475 systemd[1]: Finished lvm2-activation.service. Jul 2 08:56:23.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:23.830936 systemd[1]: Reached target local-fs-pre.target. Jul 2 08:56:23.832036 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 2 08:56:23.832098 systemd[1]: Reached target local-fs.target. Jul 2 08:56:23.833194 systemd[1]: Reached target machines.target. Jul 2 08:56:23.836735 systemd[1]: Starting ldconfig.service... Jul 2 08:56:23.840770 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 08:56:23.840867 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 08:56:23.843027 systemd[1]: Starting systemd-boot-update.service... Jul 2 08:56:23.848088 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 2 08:56:23.852285 systemd[1]: Starting systemd-machine-id-commit.service... Jul 2 08:56:23.863218 systemd[1]: Starting systemd-sysext.service... Jul 2 08:56:23.880761 systemd[1]: boot.automount: Got automount request for /boot, triggered by 991 (bootctl) Jul 2 08:56:23.884245 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 2 08:56:23.899741 systemd[1]: Unmounting usr-share-oem.mount... Jul 2 08:56:23.916236 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 2 08:56:23.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:23.935859 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 2 08:56:23.936355 systemd[1]: Unmounted usr-share-oem.mount. Jul 2 08:56:24.061606 kernel: loop0: detected capacity change from 0 to 211296 Jul 2 08:56:24.095952 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 2 08:56:24.098457 systemd[1]: Finished systemd-machine-id-commit.service. Jul 2 08:56:24.099000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.155935 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 2 08:56:24.192614 kernel: loop1: detected capacity change from 0 to 211296 Jul 2 08:56:24.243134 (sd-sysext)[1004]: Using extensions 'kubernetes'. Jul 2 08:56:24.244628 (sd-sysext)[1004]: Merged extensions into '/usr'. Jul 2 08:56:24.286483 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 08:56:24.290141 systemd[1]: Mounting usr-share-oem.mount... Jul 2 08:56:24.291984 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 08:56:24.301108 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 08:56:24.304922 systemd-fsck[1001]: fsck.fat 4.2 (2021-01-31) Jul 2 08:56:24.304922 systemd-fsck[1001]: /dev/vda1: 789 files, 119238/258078 clusters Jul 2 08:56:24.305115 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 08:56:24.308856 systemd[1]: Starting modprobe@loop.service... Jul 2 08:56:24.309380 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 08:56:24.309508 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 08:56:24.309669 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 08:56:24.314677 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 2 08:56:24.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.315783 systemd[1]: Mounted usr-share-oem.mount. Jul 2 08:56:24.316649 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 08:56:24.316773 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 08:56:24.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.317646 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 08:56:24.317763 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 08:56:24.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.318670 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 08:56:24.318775 systemd[1]: Finished modprobe@loop.service. Jul 2 08:56:24.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.321083 systemd[1]: Mounting boot.mount... Jul 2 08:56:24.321567 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 08:56:24.321613 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 08:56:24.321919 systemd[1]: Finished systemd-sysext.service. Jul 2 08:56:24.324457 systemd[1]: Starting ensure-sysext.service... Jul 2 08:56:24.326096 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 2 08:56:24.332953 systemd[1]: Reloading. Jul 2 08:56:24.366138 systemd-tmpfiles[1012]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 2 08:56:24.380717 systemd-tmpfiles[1012]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 2 08:56:24.401320 systemd-tmpfiles[1012]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 2 08:56:24.405090 /usr/lib/systemd/system-generators/torcx-generator[1032]: time="2024-07-02T08:56:24Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 08:56:24.405121 /usr/lib/systemd/system-generators/torcx-generator[1032]: time="2024-07-02T08:56:24Z" level=info msg="torcx already run" Jul 2 08:56:24.518299 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 08:56:24.518321 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 08:56:24.544464 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 08:56:24.616000 audit: BPF prog-id=24 op=LOAD Jul 2 08:56:24.616000 audit: BPF prog-id=20 op=UNLOAD Jul 2 08:56:24.617000 audit: BPF prog-id=25 op=LOAD Jul 2 08:56:24.618000 audit: BPF prog-id=21 op=UNLOAD Jul 2 08:56:24.618000 audit: BPF prog-id=26 op=LOAD Jul 2 08:56:24.618000 audit: BPF prog-id=27 op=LOAD Jul 2 08:56:24.618000 audit: BPF prog-id=22 op=UNLOAD Jul 2 08:56:24.618000 audit: BPF prog-id=23 op=UNLOAD Jul 2 08:56:24.620000 audit: BPF prog-id=28 op=LOAD Jul 2 08:56:24.620000 audit: BPF prog-id=29 op=LOAD Jul 2 08:56:24.620000 audit: BPF prog-id=18 op=UNLOAD Jul 2 08:56:24.621000 audit: BPF prog-id=19 op=UNLOAD Jul 2 08:56:24.624000 audit: BPF prog-id=30 op=LOAD Jul 2 08:56:24.624000 audit: BPF prog-id=15 op=UNLOAD Jul 2 08:56:24.624000 audit: BPF prog-id=31 op=LOAD Jul 2 08:56:24.624000 audit: BPF prog-id=32 op=LOAD Jul 2 08:56:24.624000 audit: BPF prog-id=16 op=UNLOAD Jul 2 08:56:24.624000 audit: BPF prog-id=17 op=UNLOAD Jul 2 08:56:24.629603 systemd[1]: Mounted boot.mount. Jul 2 08:56:24.651950 systemd[1]: Finished ensure-sysext.service. Jul 2 08:56:24.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.653635 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 08:56:24.655031 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 08:56:24.657300 systemd[1]: Starting modprobe@drm.service... Jul 2 08:56:24.660123 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 08:56:24.662412 systemd[1]: Starting modprobe@loop.service... Jul 2 08:56:24.663089 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 08:56:24.663136 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 08:56:24.664198 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 2 08:56:24.666074 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 08:56:24.666354 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 08:56:24.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.667811 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 08:56:24.667939 systemd[1]: Finished modprobe@drm.service. Jul 2 08:56:24.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.668923 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 08:56:24.669032 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 08:56:24.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.670277 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 08:56:24.670385 systemd[1]: Finished modprobe@loop.service. Jul 2 08:56:24.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.670000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.671673 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 08:56:24.671709 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 08:56:24.675838 systemd[1]: Finished systemd-boot-update.service. Jul 2 08:56:24.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.736156 ldconfig[990]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 2 08:56:24.747226 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 2 08:56:24.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.748955 systemd[1]: Starting audit-rules.service... Jul 2 08:56:24.750282 systemd[1]: Starting clean-ca-certificates.service... Jul 2 08:56:24.751971 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 2 08:56:24.753000 audit: BPF prog-id=33 op=LOAD Jul 2 08:56:24.756000 audit: BPF prog-id=34 op=LOAD Jul 2 08:56:24.755242 systemd[1]: Starting systemd-resolved.service... Jul 2 08:56:24.758181 systemd[1]: Starting systemd-timesyncd.service... Jul 2 08:56:24.760664 systemd[1]: Starting systemd-update-utmp.service... Jul 2 08:56:24.770044 systemd[1]: Finished clean-ca-certificates.service. Jul 2 08:56:24.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.770678 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 08:56:24.774000 audit[1089]: SYSTEM_BOOT pid=1089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.780039 systemd[1]: Finished systemd-update-utmp.service. Jul 2 08:56:24.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.781521 systemd[1]: Finished ldconfig.service. Jul 2 08:56:24.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.804849 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 2 08:56:24.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.806500 systemd[1]: Starting systemd-update-done.service... Jul 2 08:56:24.813250 systemd[1]: Finished systemd-update-done.service. Jul 2 08:56:24.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:24.839000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 2 08:56:24.839000 audit[1106]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffeb549410 a2=420 a3=0 items=0 ppid=1084 pid=1106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:24.839000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 2 08:56:24.840307 augenrules[1106]: No rules Jul 2 08:56:24.842955 systemd[1]: Finished audit-rules.service. Jul 2 08:56:24.855864 systemd-resolved[1087]: Positive Trust Anchors: Jul 2 08:56:24.855882 systemd-resolved[1087]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 08:56:24.855917 systemd-resolved[1087]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 08:56:24.858682 systemd[1]: Started systemd-timesyncd.service. Jul 2 08:56:24.859433 systemd[1]: Reached target time-set.target. Jul 2 08:56:24.864155 systemd-resolved[1087]: Using system hostname 'ci-3510-3-5-e-e1038c2d1d.novalocal'. Jul 2 08:56:24.865652 systemd[1]: Started systemd-resolved.service. Jul 2 08:56:24.866150 systemd[1]: Reached target network.target. Jul 2 08:56:24.866573 systemd[1]: Reached target nss-lookup.target. Jul 2 08:56:24.867000 systemd[1]: Reached target sysinit.target. Jul 2 08:56:24.867594 systemd[1]: Started motdgen.path. Jul 2 08:56:24.868004 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 2 08:56:24.868623 systemd[1]: Started logrotate.timer. Jul 2 08:56:24.869152 systemd[1]: Started mdadm.timer. Jul 2 08:56:24.869552 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 2 08:56:24.869976 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 2 08:56:24.870005 systemd[1]: Reached target paths.target. Jul 2 08:56:24.870399 systemd[1]: Reached target timers.target. Jul 2 08:56:24.871065 systemd[1]: Listening on dbus.socket. Jul 2 08:56:24.872407 systemd[1]: Starting docker.socket... Jul 2 08:56:24.875841 systemd[1]: Listening on sshd.socket. Jul 2 08:56:24.876361 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 08:56:24.876794 systemd[1]: Listening on docker.socket. Jul 2 08:56:24.877261 systemd[1]: Reached target sockets.target. Jul 2 08:56:24.877690 systemd[1]: Reached target basic.target. Jul 2 08:56:24.878126 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 08:56:24.878156 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 08:56:24.879011 systemd[1]: Starting containerd.service... Jul 2 08:56:24.880249 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Jul 2 08:56:24.884076 systemd[1]: Starting dbus.service... Jul 2 08:56:25.554160 systemd-resolved[1087]: Clock change detected. Flushing caches. Jul 2 08:56:25.554202 systemd-timesyncd[1088]: Contacted time server 195.154.226.102:123 (0.flatcar.pool.ntp.org). Jul 2 08:56:25.554248 systemd-timesyncd[1088]: Initial clock synchronization to Tue 2024-07-02 08:56:25.554103 UTC. Jul 2 08:56:25.555805 systemd[1]: Starting enable-oem-cloudinit.service... Jul 2 08:56:25.558016 systemd[1]: Starting extend-filesystems.service... Jul 2 08:56:25.560960 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 2 08:56:25.562115 systemd[1]: Starting motdgen.service... Jul 2 08:56:25.565021 systemd[1]: Starting prepare-helm.service... Jul 2 08:56:25.569759 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 2 08:56:25.571281 jq[1119]: false Jul 2 08:56:25.572564 systemd[1]: Starting sshd-keygen.service... Jul 2 08:56:25.579995 systemd[1]: Starting systemd-logind.service... Jul 2 08:56:25.580499 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 08:56:25.580569 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 2 08:56:25.593745 jq[1130]: true Jul 2 08:56:25.581152 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 2 08:56:25.582011 systemd[1]: Starting update-engine.service... Jul 2 08:56:25.583556 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 2 08:56:25.588131 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 2 08:56:25.588300 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 2 08:56:25.604314 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 08:56:25.604357 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 08:56:25.607140 tar[1133]: linux-amd64/helm Jul 2 08:56:25.613930 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 2 08:56:25.614087 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 2 08:56:25.623454 jq[1134]: true Jul 2 08:56:25.651676 extend-filesystems[1120]: Found loop1 Jul 2 08:56:25.652462 extend-filesystems[1120]: Found vda Jul 2 08:56:25.652462 extend-filesystems[1120]: Found vda1 Jul 2 08:56:25.652462 extend-filesystems[1120]: Found vda2 Jul 2 08:56:25.652462 extend-filesystems[1120]: Found vda3 Jul 2 08:56:25.652462 extend-filesystems[1120]: Found usr Jul 2 08:56:25.652462 extend-filesystems[1120]: Found vda4 Jul 2 08:56:25.652462 extend-filesystems[1120]: Found vda6 Jul 2 08:56:25.652462 extend-filesystems[1120]: Found vda7 Jul 2 08:56:25.652462 extend-filesystems[1120]: Found vda9 Jul 2 08:56:25.652462 extend-filesystems[1120]: Checking size of /dev/vda9 Jul 2 08:56:25.658700 systemd[1]: motdgen.service: Deactivated successfully. Jul 2 08:56:25.658884 systemd[1]: Finished motdgen.service. Jul 2 08:56:25.664222 dbus-daemon[1117]: [system] SELinux support is enabled Jul 2 08:56:25.664367 systemd[1]: Started dbus.service. Jul 2 08:56:25.666814 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 2 08:56:25.666842 systemd[1]: Reached target system-config.target. Jul 2 08:56:25.667331 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 2 08:56:25.667347 systemd[1]: Reached target user-config.target. Jul 2 08:56:25.688746 extend-filesystems[1120]: Resized partition /dev/vda9 Jul 2 08:56:25.699890 extend-filesystems[1170]: resize2fs 1.46.5 (30-Dec-2021) Jul 2 08:56:25.748622 env[1136]: time="2024-07-02T08:56:25.746638132Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 2 08:56:25.758914 update_engine[1129]: I0702 08:56:25.757193 1129 main.cc:92] Flatcar Update Engine starting Jul 2 08:56:25.759612 kernel: EXT4-fs (vda9): resizing filesystem from 1617920 to 4635643 blocks Jul 2 08:56:25.767190 systemd[1]: Started update-engine.service. Jul 2 08:56:25.770918 update_engine[1129]: I0702 08:56:25.767238 1129 update_check_scheduler.cc:74] Next update check in 7m21s Jul 2 08:56:25.770066 systemd[1]: Started locksmithd.service. Jul 2 08:56:25.774921 systemd-logind[1128]: Watching system buttons on /dev/input/event1 (Power Button) Jul 2 08:56:25.775254 systemd-logind[1128]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 2 08:56:25.777218 systemd-logind[1128]: New seat seat0. Jul 2 08:56:25.783053 systemd[1]: Started systemd-logind.service. Jul 2 08:56:25.897950 env[1136]: time="2024-07-02T08:56:25.807233128Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 2 08:56:25.897950 env[1136]: time="2024-07-02T08:56:25.888460149Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 2 08:56:25.897950 env[1136]: time="2024-07-02T08:56:25.891138392Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.161-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 2 08:56:25.897950 env[1136]: time="2024-07-02T08:56:25.891187334Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 2 08:56:25.897950 env[1136]: time="2024-07-02T08:56:25.891476577Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 08:56:25.897950 env[1136]: time="2024-07-02T08:56:25.891515630Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 2 08:56:25.897950 env[1136]: time="2024-07-02T08:56:25.891535818Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 2 08:56:25.897950 env[1136]: time="2024-07-02T08:56:25.891547740Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 2 08:56:25.897950 env[1136]: time="2024-07-02T08:56:25.891654170Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 2 08:56:25.899169 env[1136]: time="2024-07-02T08:56:25.898693312Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 2 08:56:25.899169 env[1136]: time="2024-07-02T08:56:25.898845136Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 08:56:25.899169 env[1136]: time="2024-07-02T08:56:25.898867078Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 2 08:56:25.899169 env[1136]: time="2024-07-02T08:56:25.898922491Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 2 08:56:25.899169 env[1136]: time="2024-07-02T08:56:25.898937369Z" level=info msg="metadata content store policy set" policy=shared Jul 2 08:56:25.903669 bash[1166]: Updated "/home/core/.ssh/authorized_keys" Jul 2 08:56:25.903324 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 2 08:56:25.936612 kernel: EXT4-fs (vda9): resized filesystem to 4635643 Jul 2 08:56:26.085274 locksmithd[1174]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 2 08:56:26.090434 extend-filesystems[1170]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 2 08:56:26.090434 extend-filesystems[1170]: old_desc_blocks = 1, new_desc_blocks = 3 Jul 2 08:56:26.090434 extend-filesystems[1170]: The filesystem on /dev/vda9 is now 4635643 (4k) blocks long. Jul 2 08:56:26.104476 extend-filesystems[1120]: Resized filesystem in /dev/vda9 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.092877484Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.093050829Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.093128986Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.093240264Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.093340492Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.093388452Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.093464244Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.093532052Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.093704966Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.093802299Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.093839909Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.093916903Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.094241442Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 2 08:56:26.108759 env[1136]: time="2024-07-02T08:56:26.094548628Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 2 08:56:26.090678 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.095549245Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.095664701Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.095749090Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.095986996Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.097449318Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.097518789Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.097563513Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.097661637Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.097735405Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.097769930Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.097835022Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.097875678Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.098368362Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.098447821Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 2 08:56:26.109694 env[1136]: time="2024-07-02T08:56:26.098482506Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 2 08:56:26.090821 systemd[1]: Finished extend-filesystems.service. Jul 2 08:56:26.110536 env[1136]: time="2024-07-02T08:56:26.105688391Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 2 08:56:26.110536 env[1136]: time="2024-07-02T08:56:26.105789320Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 2 08:56:26.110536 env[1136]: time="2024-07-02T08:56:26.105824376Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 2 08:56:26.110536 env[1136]: time="2024-07-02T08:56:26.105922520Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 2 08:56:26.110536 env[1136]: time="2024-07-02T08:56:26.106080096Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 2 08:56:26.110896 env[1136]: time="2024-07-02T08:56:26.106701481Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 2 08:56:26.110896 env[1136]: time="2024-07-02T08:56:26.106884404Z" level=info msg="Connect containerd service" Jul 2 08:56:26.110896 env[1136]: time="2024-07-02T08:56:26.106952432Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 2 08:56:26.110896 env[1136]: time="2024-07-02T08:56:26.108026246Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 08:56:26.119112 env[1136]: time="2024-07-02T08:56:26.113762003Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 2 08:56:26.119112 env[1136]: time="2024-07-02T08:56:26.113829439Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 2 08:56:26.119112 env[1136]: time="2024-07-02T08:56:26.115037225Z" level=info msg="containerd successfully booted in 0.384467s" Jul 2 08:56:26.119112 env[1136]: time="2024-07-02T08:56:26.116033784Z" level=info msg="Start subscribing containerd event" Jul 2 08:56:26.119112 env[1136]: time="2024-07-02T08:56:26.116075913Z" level=info msg="Start recovering state" Jul 2 08:56:26.119112 env[1136]: time="2024-07-02T08:56:26.116163347Z" level=info msg="Start event monitor" Jul 2 08:56:26.119112 env[1136]: time="2024-07-02T08:56:26.116197881Z" level=info msg="Start snapshots syncer" Jul 2 08:56:26.119112 env[1136]: time="2024-07-02T08:56:26.116208612Z" level=info msg="Start cni network conf syncer for default" Jul 2 08:56:26.119112 env[1136]: time="2024-07-02T08:56:26.116217789Z" level=info msg="Start streaming server" Jul 2 08:56:26.113945 systemd[1]: Started containerd.service. Jul 2 08:56:26.292893 systemd-networkd[969]: eth0: Gained IPv6LL Jul 2 08:56:26.294939 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 2 08:56:26.295765 systemd[1]: Reached target network-online.target. Jul 2 08:56:26.298103 systemd[1]: Starting kubelet.service... Jul 2 08:56:26.512633 systemd[1]: Created slice system-sshd.slice. Jul 2 08:56:26.751817 tar[1133]: linux-amd64/LICENSE Jul 2 08:56:26.751817 tar[1133]: linux-amd64/README.md Jul 2 08:56:26.758104 systemd[1]: Finished prepare-helm.service. Jul 2 08:56:26.857337 sshd_keygen[1145]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 2 08:56:26.895726 systemd[1]: Finished sshd-keygen.service. Jul 2 08:56:26.898075 systemd[1]: Starting issuegen.service... Jul 2 08:56:26.899636 systemd[1]: Started sshd@0-172.24.4.229:22-172.24.4.1:41676.service. Jul 2 08:56:26.905058 systemd[1]: issuegen.service: Deactivated successfully. Jul 2 08:56:26.905219 systemd[1]: Finished issuegen.service. Jul 2 08:56:26.907216 systemd[1]: Starting systemd-user-sessions.service... Jul 2 08:56:26.918967 systemd[1]: Finished systemd-user-sessions.service. Jul 2 08:56:26.920970 systemd[1]: Started getty@tty1.service. Jul 2 08:56:26.922793 systemd[1]: Started serial-getty@ttyS0.service. Jul 2 08:56:26.923920 systemd[1]: Reached target getty.target. Jul 2 08:56:27.689351 systemd[1]: Started kubelet.service. Jul 2 08:56:27.862919 sshd[1194]: Accepted publickey for core from 172.24.4.1 port 41676 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:56:27.873451 sshd[1194]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:56:27.913206 systemd-logind[1128]: New session 1 of user core. Jul 2 08:56:27.914234 systemd[1]: Created slice user-500.slice. Jul 2 08:56:27.916331 systemd[1]: Starting user-runtime-dir@500.service... Jul 2 08:56:27.929006 systemd[1]: Finished user-runtime-dir@500.service. Jul 2 08:56:27.933221 systemd[1]: Starting user@500.service... Jul 2 08:56:27.937113 (systemd)[1205]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:56:28.052014 systemd[1205]: Queued start job for default target default.target. Jul 2 08:56:28.053355 systemd[1205]: Reached target paths.target. Jul 2 08:56:28.053478 systemd[1205]: Reached target sockets.target. Jul 2 08:56:28.053569 systemd[1205]: Reached target timers.target. Jul 2 08:56:28.053710 systemd[1205]: Reached target basic.target. Jul 2 08:56:28.053853 systemd[1205]: Reached target default.target. Jul 2 08:56:28.053966 systemd[1205]: Startup finished in 110ms. Jul 2 08:56:28.054004 systemd[1]: Started user@500.service. Jul 2 08:56:28.055821 systemd[1]: Started session-1.scope. Jul 2 08:56:28.557368 systemd[1]: Started sshd@1-172.24.4.229:22-172.24.4.1:38124.service. Jul 2 08:56:28.971572 kubelet[1203]: E0702 08:56:28.971063 1203 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 08:56:28.975528 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 08:56:28.975888 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 08:56:28.976404 systemd[1]: kubelet.service: Consumed 1.578s CPU time. Jul 2 08:56:30.230687 sshd[1219]: Accepted publickey for core from 172.24.4.1 port 38124 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:56:30.233370 sshd[1219]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:56:30.244020 systemd-logind[1128]: New session 2 of user core. Jul 2 08:56:30.244797 systemd[1]: Started session-2.scope. Jul 2 08:56:30.880758 sshd[1219]: pam_unix(sshd:session): session closed for user core Jul 2 08:56:30.890233 systemd[1]: sshd@1-172.24.4.229:22-172.24.4.1:38124.service: Deactivated successfully. Jul 2 08:56:30.892171 systemd[1]: session-2.scope: Deactivated successfully. Jul 2 08:56:30.894197 systemd-logind[1128]: Session 2 logged out. Waiting for processes to exit. Jul 2 08:56:30.897840 systemd[1]: Started sshd@2-172.24.4.229:22-172.24.4.1:38128.service. Jul 2 08:56:30.901746 systemd-logind[1128]: Removed session 2. Jul 2 08:56:32.380886 sshd[1226]: Accepted publickey for core from 172.24.4.1 port 38128 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:56:32.383429 sshd[1226]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:56:32.394520 systemd[1]: Started session-3.scope. Jul 2 08:56:32.396746 systemd-logind[1128]: New session 3 of user core. Jul 2 08:56:32.662363 coreos-metadata[1115]: Jul 02 08:56:32.661 WARN failed to locate config-drive, using the metadata service API instead Jul 2 08:56:32.755905 coreos-metadata[1115]: Jul 02 08:56:32.755 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys: Attempt #1 Jul 2 08:56:32.976149 coreos-metadata[1115]: Jul 02 08:56:32.975 INFO Fetch successful Jul 2 08:56:32.976149 coreos-metadata[1115]: Jul 02 08:56:32.976 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key: Attempt #1 Jul 2 08:56:32.989952 coreos-metadata[1115]: Jul 02 08:56:32.989 INFO Fetch successful Jul 2 08:56:32.995277 unknown[1115]: wrote ssh authorized keys file for user: core Jul 2 08:56:33.030206 update-ssh-keys[1232]: Updated "/home/core/.ssh/authorized_keys" Jul 2 08:56:33.030822 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Jul 2 08:56:33.031411 systemd[1]: Reached target multi-user.target. Jul 2 08:56:33.033354 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 2 08:56:33.047263 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 2 08:56:33.047494 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 2 08:56:33.050668 systemd[1]: Startup finished in 962ms (kernel) + 7.346s (initrd) + 14.262s (userspace) = 22.572s. Jul 2 08:56:33.055922 sshd[1226]: pam_unix(sshd:session): session closed for user core Jul 2 08:56:33.058484 systemd[1]: sshd@2-172.24.4.229:22-172.24.4.1:38128.service: Deactivated successfully. Jul 2 08:56:33.059221 systemd[1]: session-3.scope: Deactivated successfully. Jul 2 08:56:33.060245 systemd-logind[1128]: Session 3 logged out. Waiting for processes to exit. Jul 2 08:56:33.061385 systemd-logind[1128]: Removed session 3. Jul 2 08:56:39.227679 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 2 08:56:39.228338 systemd[1]: Stopped kubelet.service. Jul 2 08:56:39.228441 systemd[1]: kubelet.service: Consumed 1.578s CPU time. Jul 2 08:56:39.232366 systemd[1]: Starting kubelet.service... Jul 2 08:56:39.411928 systemd[1]: Started kubelet.service. Jul 2 08:56:39.860446 kubelet[1239]: E0702 08:56:39.860352 1239 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 08:56:39.868110 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 08:56:39.868371 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 08:56:43.067393 systemd[1]: Started sshd@3-172.24.4.229:22-172.24.4.1:54972.service. Jul 2 08:56:44.664992 sshd[1247]: Accepted publickey for core from 172.24.4.1 port 54972 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:56:44.667285 sshd[1247]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:56:44.677008 systemd-logind[1128]: New session 4 of user core. Jul 2 08:56:44.678038 systemd[1]: Started session-4.scope. Jul 2 08:56:45.316458 sshd[1247]: pam_unix(sshd:session): session closed for user core Jul 2 08:56:45.320696 systemd[1]: sshd@3-172.24.4.229:22-172.24.4.1:54972.service: Deactivated successfully. Jul 2 08:56:45.321925 systemd[1]: session-4.scope: Deactivated successfully. Jul 2 08:56:45.323210 systemd-logind[1128]: Session 4 logged out. Waiting for processes to exit. Jul 2 08:56:45.325362 systemd[1]: Started sshd@4-172.24.4.229:22-172.24.4.1:58966.service. Jul 2 08:56:45.328839 systemd-logind[1128]: Removed session 4. Jul 2 08:56:46.738266 sshd[1253]: Accepted publickey for core from 172.24.4.1 port 58966 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:56:46.741998 sshd[1253]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:56:46.753073 systemd-logind[1128]: New session 5 of user core. Jul 2 08:56:46.753765 systemd[1]: Started session-5.scope. Jul 2 08:56:47.388808 sshd[1253]: pam_unix(sshd:session): session closed for user core Jul 2 08:56:47.398368 systemd[1]: sshd@4-172.24.4.229:22-172.24.4.1:58966.service: Deactivated successfully. Jul 2 08:56:47.400551 systemd[1]: session-5.scope: Deactivated successfully. Jul 2 08:56:47.404771 systemd-logind[1128]: Session 5 logged out. Waiting for processes to exit. Jul 2 08:56:47.406375 systemd[1]: Started sshd@5-172.24.4.229:22-172.24.4.1:58968.service. Jul 2 08:56:47.410445 systemd-logind[1128]: Removed session 5. Jul 2 08:56:48.814502 sshd[1259]: Accepted publickey for core from 172.24.4.1 port 58968 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:56:48.817652 sshd[1259]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:56:48.829736 systemd-logind[1128]: New session 6 of user core. Jul 2 08:56:48.830989 systemd[1]: Started session-6.scope. Jul 2 08:56:49.467046 sshd[1259]: pam_unix(sshd:session): session closed for user core Jul 2 08:56:49.475558 systemd[1]: Started sshd@6-172.24.4.229:22-172.24.4.1:58980.service. Jul 2 08:56:49.479120 systemd[1]: sshd@5-172.24.4.229:22-172.24.4.1:58968.service: Deactivated successfully. Jul 2 08:56:49.481422 systemd[1]: session-6.scope: Deactivated successfully. Jul 2 08:56:49.486375 systemd-logind[1128]: Session 6 logged out. Waiting for processes to exit. Jul 2 08:56:49.490205 systemd-logind[1128]: Removed session 6. Jul 2 08:56:50.120832 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 2 08:56:50.121292 systemd[1]: Stopped kubelet.service. Jul 2 08:56:50.124196 systemd[1]: Starting kubelet.service... Jul 2 08:56:50.357851 systemd[1]: Started kubelet.service. Jul 2 08:56:50.593628 kubelet[1271]: E0702 08:56:50.592766 1271 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 08:56:50.597734 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 08:56:50.598003 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 08:56:50.691834 sshd[1264]: Accepted publickey for core from 172.24.4.1 port 58980 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:56:50.693755 sshd[1264]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:56:50.703425 systemd-logind[1128]: New session 7 of user core. Jul 2 08:56:50.704237 systemd[1]: Started session-7.scope. Jul 2 08:56:51.193715 sudo[1279]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 2 08:56:51.194427 sudo[1279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 08:56:51.207088 dbus-daemon[1117]: \xd0MbͯU: received setenforce notice (enforcing=-1766348384) Jul 2 08:56:51.211628 sudo[1279]: pam_unix(sudo:session): session closed for user root Jul 2 08:56:51.387630 sshd[1264]: pam_unix(sshd:session): session closed for user core Jul 2 08:56:51.396071 systemd[1]: Started sshd@7-172.24.4.229:22-172.24.4.1:58996.service. Jul 2 08:56:51.397434 systemd[1]: sshd@6-172.24.4.229:22-172.24.4.1:58980.service: Deactivated successfully. Jul 2 08:56:51.398979 systemd[1]: session-7.scope: Deactivated successfully. Jul 2 08:56:51.402912 systemd-logind[1128]: Session 7 logged out. Waiting for processes to exit. Jul 2 08:56:51.406083 systemd-logind[1128]: Removed session 7. Jul 2 08:56:52.860677 sshd[1282]: Accepted publickey for core from 172.24.4.1 port 58996 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:56:52.864281 sshd[1282]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:56:52.874398 systemd-logind[1128]: New session 8 of user core. Jul 2 08:56:52.875152 systemd[1]: Started session-8.scope. Jul 2 08:56:53.296646 sudo[1287]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 2 08:56:53.297985 sudo[1287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 08:56:53.305305 sudo[1287]: pam_unix(sudo:session): session closed for user root Jul 2 08:56:53.316692 sudo[1286]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 2 08:56:53.317825 sudo[1286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 08:56:53.338547 systemd[1]: Stopping audit-rules.service... Jul 2 08:56:53.340000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 08:56:53.343426 kernel: kauditd_printk_skb: 194 callbacks suppressed Jul 2 08:56:53.343560 kernel: audit: type=1305 audit(1719910613.340:196): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 08:56:53.349520 auditctl[1290]: No rules Jul 2 08:56:53.340000 audit[1290]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeec800c50 a2=420 a3=0 items=0 ppid=1 pid=1290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:53.360171 kernel: audit: type=1300 audit(1719910613.340:196): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeec800c50 a2=420 a3=0 items=0 ppid=1 pid=1290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:53.351171 systemd[1]: audit-rules.service: Deactivated successfully. Jul 2 08:56:53.351681 systemd[1]: Stopped audit-rules.service. Jul 2 08:56:53.340000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 2 08:56:53.361990 systemd[1]: Starting audit-rules.service... Jul 2 08:56:53.364965 kernel: audit: type=1327 audit(1719910613.340:196): proctitle=2F7362696E2F617564697463746C002D44 Jul 2 08:56:53.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:53.373651 kernel: audit: type=1131 audit(1719910613.348:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:53.404449 augenrules[1307]: No rules Jul 2 08:56:53.406321 systemd[1]: Finished audit-rules.service. Jul 2 08:56:53.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:53.408522 sudo[1286]: pam_unix(sudo:session): session closed for user root Jul 2 08:56:53.407000 audit[1286]: USER_END pid=1286 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:56:53.426195 kernel: audit: type=1130 audit(1719910613.406:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:53.426307 kernel: audit: type=1106 audit(1719910613.407:199): pid=1286 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:56:53.426367 kernel: audit: type=1104 audit(1719910613.407:200): pid=1286 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:56:53.407000 audit[1286]: CRED_DISP pid=1286 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:56:53.579919 sshd[1282]: pam_unix(sshd:session): session closed for user core Jul 2 08:56:53.583000 audit[1282]: USER_END pid=1282 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:56:53.591266 systemd[1]: Started sshd@8-172.24.4.229:22-172.24.4.1:58998.service. Jul 2 08:56:53.592498 systemd[1]: sshd@7-172.24.4.229:22-172.24.4.1:58996.service: Deactivated successfully. Jul 2 08:56:53.594165 systemd[1]: session-8.scope: Deactivated successfully. Jul 2 08:56:53.598913 systemd-logind[1128]: Session 8 logged out. Waiting for processes to exit. Jul 2 08:56:53.601725 systemd-logind[1128]: Removed session 8. Jul 2 08:56:53.602642 kernel: audit: type=1106 audit(1719910613.583:201): pid=1282 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:56:53.584000 audit[1282]: CRED_DISP pid=1282 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:56:53.612664 kernel: audit: type=1104 audit(1719910613.584:202): pid=1282 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:56:53.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.229:22-172.24.4.1:58998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:53.622784 kernel: audit: type=1130 audit(1719910613.587:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.229:22-172.24.4.1:58998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:53.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.229:22-172.24.4.1:58996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:55.020000 audit[1312]: USER_ACCT pid=1312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:56:55.021833 sshd[1312]: Accepted publickey for core from 172.24.4.1 port 58998 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:56:55.022000 audit[1312]: CRED_ACQ pid=1312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:56:55.022000 audit[1312]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4cfdc2a0 a2=3 a3=0 items=0 ppid=1 pid=1312 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:55.022000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:56:55.024261 sshd[1312]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:56:55.033707 systemd-logind[1128]: New session 9 of user core. Jul 2 08:56:55.034373 systemd[1]: Started session-9.scope. Jul 2 08:56:55.045000 audit[1312]: USER_START pid=1312 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:56:55.048000 audit[1315]: CRED_ACQ pid=1315 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:56:55.518000 audit[1316]: USER_ACCT pid=1316 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:56:55.520266 sudo[1316]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 2 08:56:55.519000 audit[1316]: CRED_REFR pid=1316 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:56:55.520905 sudo[1316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 08:56:55.524000 audit[1316]: USER_START pid=1316 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:56:55.702823 systemd[1]: Starting docker.service... Jul 2 08:56:55.814869 env[1326]: time="2024-07-02T08:56:55.813995904Z" level=info msg="Starting up" Jul 2 08:56:55.818578 env[1326]: time="2024-07-02T08:56:55.818522884Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 08:56:55.818854 env[1326]: time="2024-07-02T08:56:55.818811706Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 08:56:55.819046 env[1326]: time="2024-07-02T08:56:55.819002173Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 08:56:55.819200 env[1326]: time="2024-07-02T08:56:55.819166361Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 08:56:55.823135 env[1326]: time="2024-07-02T08:56:55.823088758Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 08:56:55.823333 env[1326]: time="2024-07-02T08:56:55.823298180Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 08:56:55.823508 env[1326]: time="2024-07-02T08:56:55.823468941Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 08:56:55.823698 env[1326]: time="2024-07-02T08:56:55.823663035Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 08:56:55.834785 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2163061696-merged.mount: Deactivated successfully. Jul 2 08:56:55.999336 env[1326]: time="2024-07-02T08:56:55.999236062Z" level=info msg="Loading containers: start." Jul 2 08:56:56.116000 audit[1356]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1356 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.116000 audit[1356]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd7679fff0 a2=0 a3=7ffd7679ffdc items=0 ppid=1326 pid=1356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.116000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 2 08:56:56.118000 audit[1358]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1358 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.118000 audit[1358]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff9622d6a0 a2=0 a3=7fff9622d68c items=0 ppid=1326 pid=1358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.118000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 2 08:56:56.120000 audit[1360]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1360 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.120000 audit[1360]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffecdd3f0a0 a2=0 a3=7ffecdd3f08c items=0 ppid=1326 pid=1360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.120000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 08:56:56.122000 audit[1362]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1362 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.122000 audit[1362]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc26c42a80 a2=0 a3=7ffc26c42a6c items=0 ppid=1326 pid=1362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.122000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 08:56:56.126000 audit[1364]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.126000 audit[1364]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffb9860f30 a2=0 a3=7fffb9860f1c items=0 ppid=1326 pid=1364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.126000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 2 08:56:56.147000 audit[1369]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1369 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.147000 audit[1369]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff55eda760 a2=0 a3=7fff55eda74c items=0 ppid=1326 pid=1369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.147000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 2 08:56:56.163000 audit[1371]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1371 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.163000 audit[1371]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff5a2c8120 a2=0 a3=7fff5a2c810c items=0 ppid=1326 pid=1371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.163000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 2 08:56:56.166000 audit[1373]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1373 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.166000 audit[1373]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffeb76dd9b0 a2=0 a3=7ffeb76dd99c items=0 ppid=1326 pid=1373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.166000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 2 08:56:56.171000 audit[1375]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1375 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.171000 audit[1375]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffe34ba9b30 a2=0 a3=7ffe34ba9b1c items=0 ppid=1326 pid=1375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.171000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 08:56:56.189000 audit[1379]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1379 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.189000 audit[1379]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd313596b0 a2=0 a3=7ffd3135969c items=0 ppid=1326 pid=1379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.189000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 08:56:56.191000 audit[1380]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1380 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.191000 audit[1380]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcf01c0ba0 a2=0 a3=7ffcf01c0b8c items=0 ppid=1326 pid=1380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.191000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 08:56:56.212656 kernel: Initializing XFRM netlink socket Jul 2 08:56:56.296930 env[1326]: time="2024-07-02T08:56:56.296839297Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 2 08:56:56.337000 audit[1388]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.337000 audit[1388]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffeb223b9b0 a2=0 a3=7ffeb223b99c items=0 ppid=1326 pid=1388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.337000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 2 08:56:56.364000 audit[1391]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1391 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.364000 audit[1391]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffd046ab770 a2=0 a3=7ffd046ab75c items=0 ppid=1326 pid=1391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.364000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 2 08:56:56.370000 audit[1394]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.370000 audit[1394]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcd4302340 a2=0 a3=7ffcd430232c items=0 ppid=1326 pid=1394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.370000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 2 08:56:56.375000 audit[1396]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.375000 audit[1396]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc3d710100 a2=0 a3=7ffc3d7100ec items=0 ppid=1326 pid=1396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.375000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 2 08:56:56.379000 audit[1398]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.379000 audit[1398]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffcb14d7950 a2=0 a3=7ffcb14d793c items=0 ppid=1326 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.379000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 2 08:56:56.382000 audit[1400]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.382000 audit[1400]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc8b531cf0 a2=0 a3=7ffc8b531cdc items=0 ppid=1326 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.382000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 2 08:56:56.384000 audit[1402]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.384000 audit[1402]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc61fb35b0 a2=0 a3=7ffc61fb359c items=0 ppid=1326 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.384000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 2 08:56:56.394000 audit[1405]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.394000 audit[1405]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fffb3229fa0 a2=0 a3=7fffb3229f8c items=0 ppid=1326 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.394000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 2 08:56:56.396000 audit[1407]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.396000 audit[1407]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffcdf6c6ca0 a2=0 a3=7ffcdf6c6c8c items=0 ppid=1326 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.396000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 08:56:56.398000 audit[1409]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.398000 audit[1409]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffcd90f1650 a2=0 a3=7ffcd90f163c items=0 ppid=1326 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.398000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 08:56:56.400000 audit[1411]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.400000 audit[1411]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdaa906b60 a2=0 a3=7ffdaa906b4c items=0 ppid=1326 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.400000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 2 08:56:56.402071 systemd-networkd[969]: docker0: Link UP Jul 2 08:56:56.413000 audit[1415]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.413000 audit[1415]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe6f879480 a2=0 a3=7ffe6f87946c items=0 ppid=1326 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.413000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 08:56:56.414000 audit[1416]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:56:56.414000 audit[1416]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff27c919c0 a2=0 a3=7fff27c919ac items=0 ppid=1326 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:56:56.414000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 08:56:56.415083 env[1326]: time="2024-07-02T08:56:56.415050362Z" level=info msg="Loading containers: done." Jul 2 08:56:56.448059 env[1326]: time="2024-07-02T08:56:56.447934906Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 2 08:56:56.448365 env[1326]: time="2024-07-02T08:56:56.448170859Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 2 08:56:56.448365 env[1326]: time="2024-07-02T08:56:56.448325609Z" level=info msg="Daemon has completed initialization" Jul 2 08:56:56.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:56:56.473367 systemd[1]: Started docker.service. Jul 2 08:56:56.485824 env[1326]: time="2024-07-02T08:56:56.485747023Z" level=info msg="API listen on /run/docker.sock" Jul 2 08:56:59.219175 env[1136]: time="2024-07-02T08:56:59.219038046Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.29.6\"" Jul 2 08:57:00.007205 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2979883442.mount: Deactivated successfully. Jul 2 08:57:00.863136 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 2 08:57:00.863353 kernel: audit: type=1130 audit(1719910620.849:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:00.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:00.849673 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 2 08:57:00.850152 systemd[1]: Stopped kubelet.service. Jul 2 08:57:00.862677 systemd[1]: Starting kubelet.service... Jul 2 08:57:00.875005 kernel: audit: type=1131 audit(1719910620.849:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:00.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:00.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:00.987302 systemd[1]: Started kubelet.service. Jul 2 08:57:00.991668 kernel: audit: type=1130 audit(1719910620.986:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:01.054910 kubelet[1461]: E0702 08:57:01.054867 1461 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 08:57:01.056000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 08:57:01.056855 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 08:57:01.056970 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 08:57:01.061617 kernel: audit: type=1131 audit(1719910621.056:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 08:57:03.341790 env[1136]: time="2024-07-02T08:57:03.341669386Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:03.345416 env[1136]: time="2024-07-02T08:57:03.345367186Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3af2ab51e136465590d968a2052e02e180fc7967a03724b269c1337e8f09d36f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:03.349499 env[1136]: time="2024-07-02T08:57:03.349456675Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:03.353660 env[1136]: time="2024-07-02T08:57:03.353554210Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:f4d993b3d73cc0d59558be584b5b40785b4a96874bc76873b69d1dd818485e70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:03.355110 env[1136]: time="2024-07-02T08:57:03.355052257Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.29.6\" returns image reference \"sha256:3af2ab51e136465590d968a2052e02e180fc7967a03724b269c1337e8f09d36f\"" Jul 2 08:57:03.380165 env[1136]: time="2024-07-02T08:57:03.380106298Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.29.6\"" Jul 2 08:57:08.569550 env[1136]: time="2024-07-02T08:57:08.569441718Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:08.675065 env[1136]: time="2024-07-02T08:57:08.674985860Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:083b81fc09e858d3e0d4b42f567a9d44a2232b60bac396a94cbdd7ce1098235e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:08.725616 env[1136]: time="2024-07-02T08:57:08.725502284Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:08.742773 env[1136]: time="2024-07-02T08:57:08.742697776Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:692fc3f88a60b3afc76492ad347306d34042000f56f230959e9367fd59c48b1e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:08.745396 env[1136]: time="2024-07-02T08:57:08.745298296Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.29.6\" returns image reference \"sha256:083b81fc09e858d3e0d4b42f567a9d44a2232b60bac396a94cbdd7ce1098235e\"" Jul 2 08:57:08.768025 env[1136]: time="2024-07-02T08:57:08.767935900Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.29.6\"" Jul 2 08:57:10.832702 env[1136]: time="2024-07-02T08:57:10.832521699Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:10.836015 env[1136]: time="2024-07-02T08:57:10.835944555Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:49d9b8328a8fda6ebca6b3226c6d722d92ec7adffff18668511a88058444cf15,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:10.840561 env[1136]: time="2024-07-02T08:57:10.840496988Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:10.845011 env[1136]: time="2024-07-02T08:57:10.844942160Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:b91a4e45debd0d5336d9f533aefdf47d4b39b24071feb459e521709b9e4ec24f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:10.847473 env[1136]: time="2024-07-02T08:57:10.847367206Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.29.6\" returns image reference \"sha256:49d9b8328a8fda6ebca6b3226c6d722d92ec7adffff18668511a88058444cf15\"" Jul 2 08:57:10.869778 env[1136]: time="2024-07-02T08:57:10.869649708Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.29.6\"" Jul 2 08:57:11.258439 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 2 08:57:11.258986 systemd[1]: Stopped kubelet.service. Jul 2 08:57:11.269448 kernel: audit: type=1130 audit(1719910631.258:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:11.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:11.261835 systemd[1]: Starting kubelet.service... Jul 2 08:57:11.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:11.279681 kernel: audit: type=1131 audit(1719910631.258:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:11.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:11.404423 systemd[1]: Started kubelet.service. Jul 2 08:57:11.413642 kernel: audit: type=1130 audit(1719910631.404:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:11.493371 update_engine[1129]: I0702 08:57:11.493036 1129 update_attempter.cc:509] Updating boot flags... Jul 2 08:57:12.164354 kubelet[1487]: E0702 08:57:12.164273 1487 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 08:57:12.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 08:57:12.166082 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 08:57:12.166196 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 08:57:12.170658 kernel: audit: type=1131 audit(1719910632.165:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 08:57:13.337668 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount492694822.mount: Deactivated successfully. Jul 2 08:57:14.736377 env[1136]: time="2024-07-02T08:57:14.736282074Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:14.797916 env[1136]: time="2024-07-02T08:57:14.797832708Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9c49592198fa15b509fe4ee4a538067866776e325d6dd33c77ad6647e1d3aac9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:14.882009 env[1136]: time="2024-07-02T08:57:14.881900375Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:14.918366 env[1136]: time="2024-07-02T08:57:14.918294016Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:88bacb3e1d6c0c37c6da95c6d6b8e30531d0b4d0ab540cc290b0af51fbfebd90,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:14.919934 env[1136]: time="2024-07-02T08:57:14.919831510Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.29.6\" returns image reference \"sha256:9c49592198fa15b509fe4ee4a538067866776e325d6dd33c77ad6647e1d3aac9\"" Jul 2 08:57:14.941485 env[1136]: time="2024-07-02T08:57:14.941399589Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\"" Jul 2 08:57:15.588545 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1609592302.mount: Deactivated successfully. Jul 2 08:57:17.968921 env[1136]: time="2024-07-02T08:57:17.968842240Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:17.981654 env[1136]: time="2024-07-02T08:57:17.981520920Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:17.991387 env[1136]: time="2024-07-02T08:57:17.991243533Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:18.000439 env[1136]: time="2024-07-02T08:57:18.000361227Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:1eeb4c7316bacb1d4c8ead65571cd92dd21e27359f0d4917f1a5822a73b75db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:18.002942 env[1136]: time="2024-07-02T08:57:18.002878901Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\" returns image reference \"sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4\"" Jul 2 08:57:18.024474 env[1136]: time="2024-07-02T08:57:18.024420131Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Jul 2 08:57:18.663762 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2677218343.mount: Deactivated successfully. Jul 2 08:57:18.674906 env[1136]: time="2024-07-02T08:57:18.674796143Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:18.678624 env[1136]: time="2024-07-02T08:57:18.678520415Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:18.682348 env[1136]: time="2024-07-02T08:57:18.682228396Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:18.690608 env[1136]: time="2024-07-02T08:57:18.690499466Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:18.692206 env[1136]: time="2024-07-02T08:57:18.692120525Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Jul 2 08:57:18.710260 env[1136]: time="2024-07-02T08:57:18.710213551Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\"" Jul 2 08:57:19.977137 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3687677651.mount: Deactivated successfully. Jul 2 08:57:22.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:22.258048 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Jul 2 08:57:22.258391 systemd[1]: Stopped kubelet.service. Jul 2 08:57:22.260647 systemd[1]: Starting kubelet.service... Jul 2 08:57:22.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:22.268714 kernel: audit: type=1130 audit(1719910642.257:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:22.268816 kernel: audit: type=1131 audit(1719910642.257:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:22.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:22.407875 systemd[1]: Started kubelet.service. Jul 2 08:57:22.412779 kernel: audit: type=1130 audit(1719910642.407:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:22.461804 kubelet[1527]: E0702 08:57:22.461764 1527 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 08:57:22.463000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 08:57:22.463718 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 08:57:22.463842 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 08:57:22.469634 kernel: audit: type=1131 audit(1719910642.463:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 08:57:24.723930 env[1136]: time="2024-07-02T08:57:24.723823974Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:24.734737 env[1136]: time="2024-07-02T08:57:24.734668748Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a0eed15eed4498c145ef2f1883fcd300d7adbb759df73c901abd5383dda668e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:24.740762 env[1136]: time="2024-07-02T08:57:24.738481601Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:24.745110 env[1136]: time="2024-07-02T08:57:24.745079767Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:22f892d7672adc0b9c86df67792afdb8b2dc08880f49f669eaaa59c47d7908c2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:24.749676 env[1136]: time="2024-07-02T08:57:24.749647297Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\" returns image reference \"sha256:a0eed15eed4498c145ef2f1883fcd300d7adbb759df73c901abd5383dda668e7\"" Jul 2 08:57:29.090477 systemd[1]: Stopped kubelet.service. Jul 2 08:57:29.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:29.092000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:29.098993 systemd[1]: Starting kubelet.service... Jul 2 08:57:29.101374 kernel: audit: type=1130 audit(1719910649.091:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:29.101523 kernel: audit: type=1131 audit(1719910649.092:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:29.151752 systemd[1]: Reloading. Jul 2 08:57:29.268045 /usr/lib/systemd/system-generators/torcx-generator[1619]: time="2024-07-02T08:57:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 08:57:29.268441 /usr/lib/systemd/system-generators/torcx-generator[1619]: time="2024-07-02T08:57:29Z" level=info msg="torcx already run" Jul 2 08:57:29.363887 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 08:57:29.363906 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 08:57:29.389291 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 08:57:29.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.524948 kernel: audit: type=1400 audit(1719910649.506:252): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.525000 kernel: audit: type=1400 audit(1719910649.506:253): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.525026 kernel: audit: type=1400 audit(1719910649.512:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.551252 kernel: audit: type=1400 audit(1719910649.512:255): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.551303 kernel: audit: type=1400 audit(1719910649.512:256): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.551326 kernel: audit: type=1400 audit(1719910649.512:257): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.566127 kernel: audit: type=1400 audit(1719910649.512:258): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.566174 kernel: audit: type=1400 audit(1719910649.512:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.533000 audit: BPF prog-id=40 op=LOAD Jul 2 08:57:29.534000 audit: BPF prog-id=34 op=UNLOAD Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit: BPF prog-id=41 op=LOAD Jul 2 08:57:29.535000 audit: BPF prog-id=24 op=UNLOAD Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.543000 audit: BPF prog-id=42 op=LOAD Jul 2 08:57:29.543000 audit: BPF prog-id=33 op=UNLOAD Jul 2 08:57:29.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.558000 audit: BPF prog-id=43 op=LOAD Jul 2 08:57:29.558000 audit: BPF prog-id=38 op=UNLOAD Jul 2 08:57:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.573000 audit: BPF prog-id=44 op=LOAD Jul 2 08:57:29.575000 audit: BPF prog-id=25 op=UNLOAD Jul 2 08:57:29.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.576000 audit: BPF prog-id=45 op=LOAD Jul 2 08:57:29.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.577000 audit: BPF prog-id=46 op=LOAD Jul 2 08:57:29.578000 audit: BPF prog-id=26 op=UNLOAD Jul 2 08:57:29.578000 audit: BPF prog-id=27 op=UNLOAD Jul 2 08:57:29.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.580000 audit: BPF prog-id=47 op=LOAD Jul 2 08:57:29.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.580000 audit: BPF prog-id=48 op=LOAD Jul 2 08:57:29.580000 audit: BPF prog-id=28 op=UNLOAD Jul 2 08:57:29.580000 audit: BPF prog-id=29 op=UNLOAD Jul 2 08:57:29.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.582000 audit: BPF prog-id=49 op=LOAD Jul 2 08:57:29.582000 audit: BPF prog-id=35 op=UNLOAD Jul 2 08:57:29.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.582000 audit: BPF prog-id=50 op=LOAD Jul 2 08:57:29.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.583000 audit: BPF prog-id=51 op=LOAD Jul 2 08:57:29.583000 audit: BPF prog-id=36 op=UNLOAD Jul 2 08:57:29.583000 audit: BPF prog-id=37 op=UNLOAD Jul 2 08:57:29.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.587000 audit: BPF prog-id=52 op=LOAD Jul 2 08:57:29.587000 audit: BPF prog-id=30 op=UNLOAD Jul 2 08:57:29.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.588000 audit: BPF prog-id=53 op=LOAD Jul 2 08:57:29.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:29.588000 audit: BPF prog-id=54 op=LOAD Jul 2 08:57:29.588000 audit: BPF prog-id=31 op=UNLOAD Jul 2 08:57:29.588000 audit: BPF prog-id=32 op=UNLOAD Jul 2 08:57:29.641699 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 2 08:57:29.641769 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 2 08:57:29.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 08:57:29.642148 systemd[1]: Stopped kubelet.service. Jul 2 08:57:29.645912 systemd[1]: Starting kubelet.service... Jul 2 08:57:30.806376 systemd[1]: Started kubelet.service. Jul 2 08:57:30.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:31.297659 kubelet[1670]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 08:57:31.297659 kubelet[1670]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 08:57:31.297659 kubelet[1670]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 08:57:31.298488 kubelet[1670]: I0702 08:57:31.297766 1670 server.go:204] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 08:57:31.832837 kubelet[1670]: I0702 08:57:31.832795 1670 server.go:487] "Kubelet version" kubeletVersion="v1.29.2" Jul 2 08:57:31.832837 kubelet[1670]: I0702 08:57:31.832823 1670 server.go:489] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 08:57:31.833067 kubelet[1670]: I0702 08:57:31.833030 1670 server.go:919] "Client rotation is on, will bootstrap in background" Jul 2 08:57:31.862545 kubelet[1670]: E0702 08:57:31.862476 1670 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.229:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:31.866895 kubelet[1670]: I0702 08:57:31.866866 1670 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 08:57:31.894193 kubelet[1670]: I0702 08:57:31.894164 1670 server.go:745] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 08:57:31.894405 kubelet[1670]: I0702 08:57:31.894354 1670 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 08:57:31.894547 kubelet[1670]: I0702 08:57:31.894524 1670 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 08:57:31.895431 kubelet[1670]: I0702 08:57:31.895399 1670 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 08:57:31.895431 kubelet[1670]: I0702 08:57:31.895419 1670 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 08:57:31.895639 kubelet[1670]: I0702 08:57:31.895504 1670 state_mem.go:36] "Initialized new in-memory state store" Jul 2 08:57:31.895639 kubelet[1670]: I0702 08:57:31.895601 1670 kubelet.go:396] "Attempting to sync node with API server" Jul 2 08:57:31.895639 kubelet[1670]: I0702 08:57:31.895620 1670 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 08:57:31.895639 kubelet[1670]: I0702 08:57:31.895640 1670 kubelet.go:312] "Adding apiserver pod source" Jul 2 08:57:31.896004 kubelet[1670]: I0702 08:57:31.895652 1670 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 08:57:31.897419 kubelet[1670]: I0702 08:57:31.897395 1670 kuberuntime_manager.go:258] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 08:57:31.901261 kubelet[1670]: I0702 08:57:31.901225 1670 kubelet.go:809] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 2 08:57:31.901395 kubelet[1670]: W0702 08:57:31.901278 1670 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 2 08:57:31.901805 kubelet[1670]: I0702 08:57:31.901776 1670 server.go:1256] "Started kubelet" Jul 2 08:57:31.901941 kubelet[1670]: W0702 08:57:31.901885 1670 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Service: Get "https://172.24.4.229:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:31.902037 kubelet[1670]: E0702 08:57:31.901950 1670 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.229:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:31.902243 kubelet[1670]: W0702 08:57:31.902187 1670 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Node: Get "https://172.24.4.229:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-5-e-e1038c2d1d.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:31.902243 kubelet[1670]: E0702 08:57:31.902234 1670 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.229:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-5-e-e1038c2d1d.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:31.903022 kubelet[1670]: I0702 08:57:31.902991 1670 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 08:57:31.903737 kubelet[1670]: I0702 08:57:31.903709 1670 server.go:461] "Adding debug handlers to kubelet server" Jul 2 08:57:31.904707 kubelet[1670]: I0702 08:57:31.904682 1670 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 2 08:57:31.904896 kubelet[1670]: I0702 08:57:31.904869 1670 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 08:57:31.915000 audit[1670]: AVC avc: denied { mac_admin } for pid=1670 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:31.915000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:57:31.915000 audit[1670]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00086f320 a1=c000a2c420 a2=c00086f2f0 a3=25 items=0 ppid=1 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.915000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:57:31.915000 audit[1670]: AVC avc: denied { mac_admin } for pid=1670 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:31.915000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:57:31.915000 audit[1670]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a2e020 a1=c000a2c438 a2=c00086f3b0 a3=25 items=0 ppid=1 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.915000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:57:31.916935 kubelet[1670]: I0702 08:57:31.916373 1670 kubelet.go:1417] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 08:57:31.916935 kubelet[1670]: I0702 08:57:31.916426 1670 kubelet.go:1421] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 08:57:31.925937 kubelet[1670]: I0702 08:57:31.925924 1670 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 08:57:31.929464 kubelet[1670]: E0702 08:57:31.929426 1670 event.go:355] "Unable to write event (may retry after sleeping)" err="Post \"https://172.24.4.229:6443/api/v1/namespaces/default/events\": dial tcp 172.24.4.229:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510-3-5-e-e1038c2d1d.novalocal.17de59a01c03c847 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510-3-5-e-e1038c2d1d.novalocal,UID:ci-3510-3-5-e-e1038c2d1d.novalocal,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510-3-5-e-e1038c2d1d.novalocal,},FirstTimestamp:2024-07-02 08:57:31.901757511 +0000 UTC m=+1.080502799,LastTimestamp:2024-07-02 08:57:31.901757511 +0000 UTC m=+1.080502799,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510-3-5-e-e1038c2d1d.novalocal,}" Jul 2 08:57:31.929897 kubelet[1670]: I0702 08:57:31.929881 1670 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 08:57:31.930415 kubelet[1670]: I0702 08:57:31.930399 1670 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Jul 2 08:57:31.930546 kubelet[1670]: I0702 08:57:31.930534 1670 reconciler_new.go:29] "Reconciler: start to sync state" Jul 2 08:57:31.932194 kubelet[1670]: W0702 08:57:31.932158 1670 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.CSIDriver: Get "https://172.24.4.229:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:31.932303 kubelet[1670]: E0702 08:57:31.932290 1670 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.229:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:31.932499 kubelet[1670]: E0702 08:57:31.932486 1670 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.229:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-5-e-e1038c2d1d.novalocal?timeout=10s\": dial tcp 172.24.4.229:6443: connect: connection refused" interval="200ms" Jul 2 08:57:31.934142 kubelet[1670]: I0702 08:57:31.934112 1670 factory.go:221] Registration of the systemd container factory successfully Jul 2 08:57:31.934273 kubelet[1670]: I0702 08:57:31.934240 1670 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 2 08:57:31.934000 audit[1680]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1680 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:31.934000 audit[1680]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff321076b0 a2=0 a3=7fff3210769c items=0 ppid=1670 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.934000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 08:57:31.936517 kubelet[1670]: I0702 08:57:31.936504 1670 factory.go:221] Registration of the containerd container factory successfully Jul 2 08:57:31.937731 kubelet[1670]: E0702 08:57:31.937718 1670 kubelet.go:1462] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 08:57:31.937000 audit[1682]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:31.937000 audit[1682]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc24c136c0 a2=0 a3=7ffc24c136ac items=0 ppid=1670 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.937000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 08:57:31.946000 audit[1686]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:31.946000 audit[1686]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd6f037430 a2=0 a3=7ffd6f03741c items=0 ppid=1670 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.946000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 08:57:31.948000 audit[1688]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:31.948000 audit[1688]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffed0c30220 a2=0 a3=7ffed0c3020c items=0 ppid=1670 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.948000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 08:57:31.963000 audit[1691]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1691 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:31.963000 audit[1691]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fff437ea040 a2=0 a3=7fff437ea02c items=0 ppid=1670 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.963000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 2 08:57:31.969065 kubelet[1670]: I0702 08:57:31.969014 1670 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 08:57:31.976000 audit[1693]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1693 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:31.976000 audit[1693]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd33789390 a2=0 a3=7ffd3378937c items=0 ppid=1670 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.976000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 08:57:31.977740 kubelet[1670]: I0702 08:57:31.977708 1670 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 08:57:31.977804 kubelet[1670]: I0702 08:57:31.977760 1670 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 08:57:31.977804 kubelet[1670]: I0702 08:57:31.977789 1670 kubelet.go:2329] "Starting kubelet main sync loop" Jul 2 08:57:31.977922 kubelet[1670]: E0702 08:57:31.977898 1670 kubelet.go:2353] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 08:57:31.977000 audit[1694]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:31.977000 audit[1694]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe81e35210 a2=0 a3=7ffe81e351fc items=0 ppid=1670 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.977000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 08:57:31.978000 audit[1696]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:31.978000 audit[1696]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdaaa3d510 a2=0 a3=7ffdaaa3d4fc items=0 ppid=1670 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.978000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 08:57:31.980000 audit[1695]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1695 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:31.980000 audit[1695]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe6453a150 a2=0 a3=7ffe6453a13c items=0 ppid=1670 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.980000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 08:57:31.981000 audit[1697]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:31.981000 audit[1697]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdd7b6f1a0 a2=0 a3=7ffdd7b6f18c items=0 ppid=1670 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.981000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 08:57:31.982000 audit[1698]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1698 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:31.983317 kubelet[1670]: W0702 08:57:31.983238 1670 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.RuntimeClass: Get "https://172.24.4.229:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:31.983317 kubelet[1670]: E0702 08:57:31.983297 1670 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.229:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:31.982000 audit[1698]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffd0f44b4f0 a2=0 a3=7ffd0f44b4dc items=0 ppid=1670 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.983489 kubelet[1670]: I0702 08:57:31.983451 1670 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 08:57:31.983519 kubelet[1670]: I0702 08:57:31.983488 1670 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 08:57:31.983519 kubelet[1670]: I0702 08:57:31.983516 1670 state_mem.go:36] "Initialized new in-memory state store" Jul 2 08:57:31.982000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 08:57:31.984000 audit[1699]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1699 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:31.984000 audit[1699]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcedd99a60 a2=0 a3=7ffcedd99a4c items=0 ppid=1670 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:31.984000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 08:57:31.989742 kubelet[1670]: I0702 08:57:31.989705 1670 policy_none.go:49] "None policy: Start" Jul 2 08:57:31.993138 kubelet[1670]: I0702 08:57:31.993106 1670 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 2 08:57:31.993235 kubelet[1670]: I0702 08:57:31.993159 1670 state_mem.go:35] "Initializing new in-memory state store" Jul 2 08:57:32.006662 systemd[1]: Created slice kubepods.slice. Jul 2 08:57:32.017474 systemd[1]: Created slice kubepods-besteffort.slice. Jul 2 08:57:32.028636 systemd[1]: Created slice kubepods-burstable.slice. Jul 2 08:57:32.032015 kubelet[1670]: I0702 08:57:32.031984 1670 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 08:57:32.031000 audit[1670]: AVC avc: denied { mac_admin } for pid=1670 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:32.031000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:57:32.031000 audit[1670]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e03110 a1=c0009d8030 a2=c000e030e0 a3=25 items=0 ppid=1 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:32.031000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:57:32.033275 kubelet[1670]: I0702 08:57:32.033243 1670 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 08:57:32.033677 kubelet[1670]: I0702 08:57:32.033642 1670 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 08:57:32.035039 kubelet[1670]: I0702 08:57:32.035008 1670 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.036125 kubelet[1670]: E0702 08:57:32.036105 1670 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://172.24.4.229:6443/api/v1/nodes\": dial tcp 172.24.4.229:6443: connect: connection refused" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.038180 kubelet[1670]: E0702 08:57:32.038048 1670 eviction_manager.go:282] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" not found" Jul 2 08:57:32.078192 kubelet[1670]: I0702 08:57:32.078118 1670 topology_manager.go:215] "Topology Admit Handler" podUID="43a76d4e9d6641378072a5f12806332e" podNamespace="kube-system" podName="kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.080695 kubelet[1670]: I0702 08:57:32.080657 1670 topology_manager.go:215] "Topology Admit Handler" podUID="5f82d0d8189e0be4466d3f221b54acc2" podNamespace="kube-system" podName="kube-scheduler-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.092365 kubelet[1670]: I0702 08:57:32.085007 1670 topology_manager.go:215] "Topology Admit Handler" podUID="538bd738902d8dccc719bd3aaafa7bee" podNamespace="kube-system" podName="kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.095281 systemd[1]: Created slice kubepods-burstable-pod43a76d4e9d6641378072a5f12806332e.slice. Jul 2 08:57:32.124914 systemd[1]: Created slice kubepods-burstable-pod5f82d0d8189e0be4466d3f221b54acc2.slice. Jul 2 08:57:32.133233 kubelet[1670]: I0702 08:57:32.133167 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/43a76d4e9d6641378072a5f12806332e-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"43a76d4e9d6641378072a5f12806332e\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.133384 kubelet[1670]: I0702 08:57:32.133273 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/43a76d4e9d6641378072a5f12806332e-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"43a76d4e9d6641378072a5f12806332e\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.133384 kubelet[1670]: I0702 08:57:32.133342 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/538bd738902d8dccc719bd3aaafa7bee-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"538bd738902d8dccc719bd3aaafa7bee\") " pod="kube-system/kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.133547 kubelet[1670]: I0702 08:57:32.133402 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/43a76d4e9d6641378072a5f12806332e-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"43a76d4e9d6641378072a5f12806332e\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.133547 kubelet[1670]: I0702 08:57:32.133461 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/43a76d4e9d6641378072a5f12806332e-ca-certs\") pod \"kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"43a76d4e9d6641378072a5f12806332e\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.133547 kubelet[1670]: I0702 08:57:32.133527 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/43a76d4e9d6641378072a5f12806332e-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"43a76d4e9d6641378072a5f12806332e\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.133821 kubelet[1670]: I0702 08:57:32.133619 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5f82d0d8189e0be4466d3f221b54acc2-kubeconfig\") pod \"kube-scheduler-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"5f82d0d8189e0be4466d3f221b54acc2\") " pod="kube-system/kube-scheduler-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.133821 kubelet[1670]: I0702 08:57:32.133816 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/538bd738902d8dccc719bd3aaafa7bee-ca-certs\") pod \"kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"538bd738902d8dccc719bd3aaafa7bee\") " pod="kube-system/kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.133959 kubelet[1670]: I0702 08:57:32.133875 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/538bd738902d8dccc719bd3aaafa7bee-k8s-certs\") pod \"kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"538bd738902d8dccc719bd3aaafa7bee\") " pod="kube-system/kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.135348 kubelet[1670]: E0702 08:57:32.135284 1670 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.229:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-5-e-e1038c2d1d.novalocal?timeout=10s\": dial tcp 172.24.4.229:6443: connect: connection refused" interval="400ms" Jul 2 08:57:32.140959 systemd[1]: Created slice kubepods-burstable-pod538bd738902d8dccc719bd3aaafa7bee.slice. Jul 2 08:57:32.239817 kubelet[1670]: I0702 08:57:32.239763 1670 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.240681 kubelet[1670]: E0702 08:57:32.240637 1670 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://172.24.4.229:6443/api/v1/nodes\": dial tcp 172.24.4.229:6443: connect: connection refused" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.421649 env[1136]: time="2024-07-02T08:57:32.419019709Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal,Uid:43a76d4e9d6641378072a5f12806332e,Namespace:kube-system,Attempt:0,}" Jul 2 08:57:32.437207 env[1136]: time="2024-07-02T08:57:32.437135159Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-5-e-e1038c2d1d.novalocal,Uid:5f82d0d8189e0be4466d3f221b54acc2,Namespace:kube-system,Attempt:0,}" Jul 2 08:57:32.447366 env[1136]: time="2024-07-02T08:57:32.447301323Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal,Uid:538bd738902d8dccc719bd3aaafa7bee,Namespace:kube-system,Attempt:0,}" Jul 2 08:57:32.537251 kubelet[1670]: E0702 08:57:32.537196 1670 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.229:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-5-e-e1038c2d1d.novalocal?timeout=10s\": dial tcp 172.24.4.229:6443: connect: connection refused" interval="800ms" Jul 2 08:57:32.644150 kubelet[1670]: I0702 08:57:32.643766 1670 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.644930 kubelet[1670]: E0702 08:57:32.644899 1670 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://172.24.4.229:6443/api/v1/nodes\": dial tcp 172.24.4.229:6443: connect: connection refused" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:32.824090 kubelet[1670]: W0702 08:57:32.823851 1670 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Service: Get "https://172.24.4.229:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:32.824090 kubelet[1670]: E0702 08:57:32.824032 1670 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.229:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:32.966977 kubelet[1670]: W0702 08:57:32.966815 1670 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Node: Get "https://172.24.4.229:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-5-e-e1038c2d1d.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:32.966977 kubelet[1670]: E0702 08:57:32.966934 1670 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.229:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-5-e-e1038c2d1d.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:33.000369 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount779404716.mount: Deactivated successfully. Jul 2 08:57:33.008809 kubelet[1670]: W0702 08:57:33.008730 1670 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.RuntimeClass: Get "https://172.24.4.229:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:33.008809 kubelet[1670]: E0702 08:57:33.008812 1670 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.229:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:33.048656 env[1136]: time="2024-07-02T08:57:33.048541562Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:33.057914 env[1136]: time="2024-07-02T08:57:33.057861397Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:33.059902 env[1136]: time="2024-07-02T08:57:33.059850892Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:33.062791 env[1136]: time="2024-07-02T08:57:33.062739775Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:33.066621 env[1136]: time="2024-07-02T08:57:33.066527125Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:33.068506 env[1136]: time="2024-07-02T08:57:33.068454533Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:33.070643 env[1136]: time="2024-07-02T08:57:33.070531422Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:33.075973 env[1136]: time="2024-07-02T08:57:33.075793390Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:33.082382 env[1136]: time="2024-07-02T08:57:33.082302488Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:33.090148 env[1136]: time="2024-07-02T08:57:33.090075501Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:33.091949 env[1136]: time="2024-07-02T08:57:33.091854901Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:33.100065 env[1136]: time="2024-07-02T08:57:33.100003197Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:33.157717 env[1136]: time="2024-07-02T08:57:33.157630348Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:57:33.157921 env[1136]: time="2024-07-02T08:57:33.157712381Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:57:33.157921 env[1136]: time="2024-07-02T08:57:33.157744041Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:57:33.158067 env[1136]: time="2024-07-02T08:57:33.158020641Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a35e21137dab8da0f2b82a36bb895285cf88436e304e2033f6a5ae9e2e0f10ca pid=1714 runtime=io.containerd.runc.v2 Jul 2 08:57:33.171229 env[1136]: time="2024-07-02T08:57:33.171151030Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:57:33.171529 env[1136]: time="2024-07-02T08:57:33.171502318Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:57:33.171671 env[1136]: time="2024-07-02T08:57:33.171645818Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:57:33.172116 env[1136]: time="2024-07-02T08:57:33.172031993Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/abdc73f12593d7487439cb0828db6c507cac22a91cb0c2d8bb1e38c8fb44a7c8 pid=1719 runtime=io.containerd.runc.v2 Jul 2 08:57:33.189686 systemd[1]: Started cri-containerd-a35e21137dab8da0f2b82a36bb895285cf88436e304e2033f6a5ae9e2e0f10ca.scope. Jul 2 08:57:33.205491 systemd[1]: Started cri-containerd-abdc73f12593d7487439cb0828db6c507cac22a91cb0c2d8bb1e38c8fb44a7c8.scope. Jul 2 08:57:33.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.214000 audit: BPF prog-id=55 op=LOAD Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1714 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133356532313133376461623864613066326238326133366262383935 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1714 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133356532313133376461623864613066326238326133366262383935 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit: BPF prog-id=56 op=LOAD Jul 2 08:57:33.216000 audit[1730]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003eadf0 items=0 ppid=1714 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133356532313133376461623864613066326238326133366262383935 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.216000 audit: BPF prog-id=57 op=LOAD Jul 2 08:57:33.216000 audit[1730]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003eae38 items=0 ppid=1714 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133356532313133376461623864613066326238326133366262383935 Jul 2 08:57:33.217000 audit: BPF prog-id=57 op=UNLOAD Jul 2 08:57:33.217000 audit: BPF prog-id=56 op=UNLOAD Jul 2 08:57:33.217000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.217000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.217000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.217000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.217000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.217000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.217000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.217000 audit[1730]: AVC avc: denied { perfmon } for pid=1730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.217000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.217000 audit[1730]: AVC avc: denied { bpf } for pid=1730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.217000 audit: BPF prog-id=58 op=LOAD Jul 2 08:57:33.217000 audit[1730]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003eb248 items=0 ppid=1714 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.217000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133356532313133376461623864613066326238326133366262383935 Jul 2 08:57:33.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.224000 audit: BPF prog-id=59 op=LOAD Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1719 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162646337336631323539336437343837343339636230383238646236 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1719 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162646337336631323539336437343837343339636230383238646236 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit: BPF prog-id=60 op=LOAD Jul 2 08:57:33.225000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003566e0 items=0 ppid=1719 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162646337336631323539336437343837343339636230383238646236 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.225000 audit: BPF prog-id=61 op=LOAD Jul 2 08:57:33.225000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000356728 items=0 ppid=1719 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162646337336631323539336437343837343339636230383238646236 Jul 2 08:57:33.226000 audit: BPF prog-id=61 op=UNLOAD Jul 2 08:57:33.226000 audit: BPF prog-id=60 op=UNLOAD Jul 2 08:57:33.226000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.226000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.226000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.226000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.226000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.226000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.226000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.226000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.226000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.226000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.226000 audit: BPF prog-id=62 op=LOAD Jul 2 08:57:33.226000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000356b38 items=0 ppid=1719 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162646337336631323539336437343837343339636230383238646236 Jul 2 08:57:33.273226 env[1136]: time="2024-07-02T08:57:33.273136660Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:57:33.273435 env[1136]: time="2024-07-02T08:57:33.273409804Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:57:33.273527 env[1136]: time="2024-07-02T08:57:33.273504080Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:57:33.273762 env[1136]: time="2024-07-02T08:57:33.273734482Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a956de6a5bf649d425af7ebb0f8093a7ddee2f69579f05e0dc0dc72b3b7205fd pid=1788 runtime=io.containerd.runc.v2 Jul 2 08:57:33.277286 env[1136]: time="2024-07-02T08:57:33.277249903Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal,Uid:538bd738902d8dccc719bd3aaafa7bee,Namespace:kube-system,Attempt:0,} returns sandbox id \"abdc73f12593d7487439cb0828db6c507cac22a91cb0c2d8bb1e38c8fb44a7c8\"" Jul 2 08:57:33.282195 env[1136]: time="2024-07-02T08:57:33.282147997Z" level=info msg="CreateContainer within sandbox \"abdc73f12593d7487439cb0828db6c507cac22a91cb0c2d8bb1e38c8fb44a7c8\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 2 08:57:33.291618 env[1136]: time="2024-07-02T08:57:33.291557502Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal,Uid:43a76d4e9d6641378072a5f12806332e,Namespace:kube-system,Attempt:0,} returns sandbox id \"a35e21137dab8da0f2b82a36bb895285cf88436e304e2033f6a5ae9e2e0f10ca\"" Jul 2 08:57:33.295817 env[1136]: time="2024-07-02T08:57:33.295784917Z" level=info msg="CreateContainer within sandbox \"a35e21137dab8da0f2b82a36bb895285cf88436e304e2033f6a5ae9e2e0f10ca\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 2 08:57:33.297220 systemd[1]: Started cri-containerd-a956de6a5bf649d425af7ebb0f8093a7ddee2f69579f05e0dc0dc72b3b7205fd.scope. Jul 2 08:57:33.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.314000 audit: BPF prog-id=63 op=LOAD Jul 2 08:57:33.315000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.315000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1788 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139353664653661356266363439643432356166376562623066383039 Jul 2 08:57:33.315000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.315000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1788 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139353664653661356266363439643432356166376562623066383039 Jul 2 08:57:33.315000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.315000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.315000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.315000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.315000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.315000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.315000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.315000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.315000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.315000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.315000 audit: BPF prog-id=64 op=LOAD Jul 2 08:57:33.315000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000361c30 items=0 ppid=1788 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139353664653661356266363439643432356166376562623066383039 Jul 2 08:57:33.317000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.317000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.317000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.317000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.317000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.317000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.317000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.317000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.317000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.317000 audit: BPF prog-id=65 op=LOAD Jul 2 08:57:33.317000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000361c78 items=0 ppid=1788 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139353664653661356266363439643432356166376562623066383039 Jul 2 08:57:33.319000 audit: BPF prog-id=65 op=UNLOAD Jul 2 08:57:33.319000 audit: BPF prog-id=64 op=UNLOAD Jul 2 08:57:33.319000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.319000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.319000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.319000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.319000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.319000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.319000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.319000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.319000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.319000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.319000 audit: BPF prog-id=66 op=LOAD Jul 2 08:57:33.319000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003de088 items=0 ppid=1788 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139353664653661356266363439643432356166376562623066383039 Jul 2 08:57:33.331512 env[1136]: time="2024-07-02T08:57:33.331396068Z" level=info msg="CreateContainer within sandbox \"abdc73f12593d7487439cb0828db6c507cac22a91cb0c2d8bb1e38c8fb44a7c8\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"2f9022806763e4e78fae7041d913afc2adc1086db7772f0c747917144b99bb6a\"" Jul 2 08:57:33.334831 env[1136]: time="2024-07-02T08:57:33.334802542Z" level=info msg="StartContainer for \"2f9022806763e4e78fae7041d913afc2adc1086db7772f0c747917144b99bb6a\"" Jul 2 08:57:33.336451 env[1136]: time="2024-07-02T08:57:33.336424968Z" level=info msg="CreateContainer within sandbox \"a35e21137dab8da0f2b82a36bb895285cf88436e304e2033f6a5ae9e2e0f10ca\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"f0b2fb8cc14f48438784e5008ba0024d93455028411ea7e78de5553dd7a77a34\"" Jul 2 08:57:33.337058 env[1136]: time="2024-07-02T08:57:33.337037578Z" level=info msg="StartContainer for \"f0b2fb8cc14f48438784e5008ba0024d93455028411ea7e78de5553dd7a77a34\"" Jul 2 08:57:33.338458 kubelet[1670]: E0702 08:57:33.338402 1670 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.229:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-5-e-e1038c2d1d.novalocal?timeout=10s\": dial tcp 172.24.4.229:6443: connect: connection refused" interval="1.6s" Jul 2 08:57:33.368433 systemd[1]: Started cri-containerd-2f9022806763e4e78fae7041d913afc2adc1086db7772f0c747917144b99bb6a.scope. Jul 2 08:57:33.378150 systemd[1]: Started cri-containerd-f0b2fb8cc14f48438784e5008ba0024d93455028411ea7e78de5553dd7a77a34.scope. Jul 2 08:57:33.388700 env[1136]: time="2024-07-02T08:57:33.388663472Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-5-e-e1038c2d1d.novalocal,Uid:5f82d0d8189e0be4466d3f221b54acc2,Namespace:kube-system,Attempt:0,} returns sandbox id \"a956de6a5bf649d425af7ebb0f8093a7ddee2f69579f05e0dc0dc72b3b7205fd\"" Jul 2 08:57:33.393269 env[1136]: time="2024-07-02T08:57:33.393238150Z" level=info msg="CreateContainer within sandbox \"a956de6a5bf649d425af7ebb0f8093a7ddee2f69579f05e0dc0dc72b3b7205fd\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 2 08:57:33.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit: BPF prog-id=67 op=LOAD Jul 2 08:57:33.400000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1836]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1719 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266393032323830363736336534653738666165373034316439313361 Jul 2 08:57:33.400000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1836]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1719 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266393032323830363736336534653738666165373034316439313361 Jul 2 08:57:33.400000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.400000 audit: BPF prog-id=68 op=LOAD Jul 2 08:57:33.400000 audit[1836]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000356a40 items=0 ppid=1719 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266393032323830363736336534653738666165373034316439313361 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit: BPF prog-id=69 op=LOAD Jul 2 08:57:33.401000 audit[1836]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000356a88 items=0 ppid=1719 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266393032323830363736336534653738666165373034316439313361 Jul 2 08:57:33.401000 audit: BPF prog-id=69 op=UNLOAD Jul 2 08:57:33.401000 audit: BPF prog-id=68 op=UNLOAD Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { perfmon } for pid=1836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit[1836]: AVC avc: denied { bpf } for pid=1836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.401000 audit: BPF prog-id=70 op=LOAD Jul 2 08:57:33.401000 audit[1836]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000356e98 items=0 ppid=1719 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266393032323830363736336534653738666165373034316439313361 Jul 2 08:57:33.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.405000 audit: BPF prog-id=71 op=LOAD Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1714 pid=1850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630623266623863633134663438343338373834653530303862613030 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1714 pid=1850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630623266623863633134663438343338373834653530303862613030 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit: BPF prog-id=72 op=LOAD Jul 2 08:57:33.406000 audit[1850]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000255f90 items=0 ppid=1714 pid=1850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630623266623863633134663438343338373834653530303862613030 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.406000 audit: BPF prog-id=73 op=LOAD Jul 2 08:57:33.406000 audit[1850]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000255fd8 items=0 ppid=1714 pid=1850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630623266623863633134663438343338373834653530303862613030 Jul 2 08:57:33.406000 audit: BPF prog-id=73 op=UNLOAD Jul 2 08:57:33.406000 audit: BPF prog-id=72 op=UNLOAD Jul 2 08:57:33.407000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.407000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.407000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.407000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.407000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.407000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.407000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.407000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.407000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.407000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.407000 audit: BPF prog-id=74 op=LOAD Jul 2 08:57:33.407000 audit[1850]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003a23e8 items=0 ppid=1714 pid=1850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630623266623863633134663438343338373834653530303862613030 Jul 2 08:57:33.426428 env[1136]: time="2024-07-02T08:57:33.426372662Z" level=info msg="CreateContainer within sandbox \"a956de6a5bf649d425af7ebb0f8093a7ddee2f69579f05e0dc0dc72b3b7205fd\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"d1f37c43d51087090e718a47cc7956bbab5699fd1ba3986706f044f8bf0f5eee\"" Jul 2 08:57:33.429065 kubelet[1670]: W0702 08:57:33.428896 1670 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.CSIDriver: Get "https://172.24.4.229:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:33.429065 kubelet[1670]: E0702 08:57:33.429009 1670 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.229:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:33.429770 env[1136]: time="2024-07-02T08:57:33.429719064Z" level=info msg="StartContainer for \"d1f37c43d51087090e718a47cc7956bbab5699fd1ba3986706f044f8bf0f5eee\"" Jul 2 08:57:33.455687 kubelet[1670]: I0702 08:57:33.455079 1670 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:33.455687 kubelet[1670]: E0702 08:57:33.455577 1670 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://172.24.4.229:6443/api/v1/nodes\": dial tcp 172.24.4.229:6443: connect: connection refused" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:33.462304 systemd[1]: Started cri-containerd-d1f37c43d51087090e718a47cc7956bbab5699fd1ba3986706f044f8bf0f5eee.scope. Jul 2 08:57:33.471201 env[1136]: time="2024-07-02T08:57:33.471159938Z" level=info msg="StartContainer for \"f0b2fb8cc14f48438784e5008ba0024d93455028411ea7e78de5553dd7a77a34\" returns successfully" Jul 2 08:57:33.483012 env[1136]: time="2024-07-02T08:57:33.482973265Z" level=info msg="StartContainer for \"2f9022806763e4e78fae7041d913afc2adc1086db7772f0c747917144b99bb6a\" returns successfully" Jul 2 08:57:33.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.492000 audit: BPF prog-id=75 op=LOAD Jul 2 08:57:33.494000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.494000 audit[1884]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1788 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431663337633433643531303837303930653731386134376363373935 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1788 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431663337633433643531303837303930653731386134376363373935 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit: BPF prog-id=76 op=LOAD Jul 2 08:57:33.496000 audit[1884]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001e5a90 items=0 ppid=1788 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431663337633433643531303837303930653731386134376363373935 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit: BPF prog-id=77 op=LOAD Jul 2 08:57:33.496000 audit[1884]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001e5ad8 items=0 ppid=1788 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431663337633433643531303837303930653731386134376363373935 Jul 2 08:57:33.496000 audit: BPF prog-id=77 op=UNLOAD Jul 2 08:57:33.496000 audit: BPF prog-id=76 op=UNLOAD Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { perfmon } for pid=1884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit[1884]: AVC avc: denied { bpf } for pid=1884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:33.496000 audit: BPF prog-id=78 op=LOAD Jul 2 08:57:33.496000 audit[1884]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001e5ee8 items=0 ppid=1788 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:33.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431663337633433643531303837303930653731386134376363373935 Jul 2 08:57:33.552654 env[1136]: time="2024-07-02T08:57:33.552557421Z" level=info msg="StartContainer for \"d1f37c43d51087090e718a47cc7956bbab5699fd1ba3986706f044f8bf0f5eee\" returns successfully" Jul 2 08:57:33.912887 kubelet[1670]: E0702 08:57:33.912839 1670 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.229:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.229:6443: connect: connection refused Jul 2 08:57:35.058023 kubelet[1670]: I0702 08:57:35.057986 1670 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:35.137000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:35.139754 kernel: kauditd_printk_skb: 556 callbacks suppressed Jul 2 08:57:35.139843 kernel: audit: type=1400 audit(1719910655.137:549): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:35.137000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000a7e000 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:57:35.137000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:57:35.156795 kernel: audit: type=1300 audit(1719910655.137:549): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000a7e000 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:57:35.156852 kernel: audit: type=1327 audit(1719910655.137:549): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:57:35.138000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:35.161836 kernel: audit: type=1400 audit(1719910655.138:550): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:35.138000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0000d23e0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:57:35.168204 kernel: audit: type=1300 audit(1719910655.138:550): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0000d23e0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:57:35.168281 kernel: audit: type=1327 audit(1719910655.138:550): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:57:35.138000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:57:36.172000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:36.172000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=48 a1=c003a81c60 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:57:36.198158 kernel: audit: type=1400 audit(1719910656.172:551): avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:36.198337 kernel: audit: type=1300 audit(1719910656.172:551): arch=c000003e syscall=254 success=no exit=-13 a0=48 a1=c003a81c60 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:57:36.172000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:57:36.212638 kernel: audit: type=1327 audit(1719910656.172:551): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:57:36.177000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526900 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:36.177000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c002edc060 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:57:36.225711 kernel: audit: type=1400 audit(1719910656.177:552): avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526900 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:36.177000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:57:36.177000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:36.177000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c002edc720 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:57:36.177000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:57:36.231000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=526906 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:36.231000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c002edcba0 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:57:36.231000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:57:36.251000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:36.251000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c0052b29c0 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:57:36.251000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:57:36.252000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:36.252000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c004c2b080 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:57:36.252000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:57:36.387327 kubelet[1670]: E0702 08:57:36.387249 1670 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510-3-5-e-e1038c2d1d.novalocal\" not found" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:36.511479 kubelet[1670]: I0702 08:57:36.511438 1670 kubelet_node_status.go:76] "Successfully registered node" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:36.900744 kubelet[1670]: I0702 08:57:36.900453 1670 apiserver.go:52] "Watching apiserver" Jul 2 08:57:36.930948 kubelet[1670]: I0702 08:57:36.930856 1670 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Jul 2 08:57:38.803559 kubelet[1670]: W0702 08:57:38.803514 1670 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Jul 2 08:57:39.421789 kubelet[1670]: W0702 08:57:39.421678 1670 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Jul 2 08:57:39.540437 systemd[1]: Reloading. Jul 2 08:57:39.662188 /usr/lib/systemd/system-generators/torcx-generator[1958]: time="2024-07-02T08:57:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 08:57:39.662221 /usr/lib/systemd/system-generators/torcx-generator[1958]: time="2024-07-02T08:57:39Z" level=info msg="torcx already run" Jul 2 08:57:39.767777 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 08:57:39.767811 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 08:57:39.800993 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 08:57:39.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.905000 audit: BPF prog-id=79 op=LOAD Jul 2 08:57:39.905000 audit: BPF prog-id=40 op=UNLOAD Jul 2 08:57:39.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.907000 audit: BPF prog-id=80 op=LOAD Jul 2 08:57:39.907000 audit: BPF prog-id=41 op=UNLOAD Jul 2 08:57:39.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.909000 audit: BPF prog-id=81 op=LOAD Jul 2 08:57:39.909000 audit: BPF prog-id=42 op=UNLOAD Jul 2 08:57:39.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.911000 audit: BPF prog-id=82 op=LOAD Jul 2 08:57:39.911000 audit: BPF prog-id=43 op=UNLOAD Jul 2 08:57:39.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit: BPF prog-id=83 op=LOAD Jul 2 08:57:39.913000 audit: BPF prog-id=44 op=UNLOAD Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit: BPF prog-id=84 op=LOAD Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.913000 audit: BPF prog-id=85 op=LOAD Jul 2 08:57:39.913000 audit: BPF prog-id=45 op=UNLOAD Jul 2 08:57:39.913000 audit: BPF prog-id=46 op=UNLOAD Jul 2 08:57:39.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.914000 audit: BPF prog-id=86 op=LOAD Jul 2 08:57:39.914000 audit: BPF prog-id=59 op=UNLOAD Jul 2 08:57:39.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.916000 audit: BPF prog-id=87 op=LOAD Jul 2 08:57:39.916000 audit: BPF prog-id=55 op=UNLOAD Jul 2 08:57:39.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.916000 audit: BPF prog-id=88 op=LOAD Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit: BPF prog-id=89 op=LOAD Jul 2 08:57:39.917000 audit: BPF prog-id=47 op=UNLOAD Jul 2 08:57:39.917000 audit: BPF prog-id=48 op=UNLOAD Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.918000 audit: BPF prog-id=90 op=LOAD Jul 2 08:57:39.918000 audit: BPF prog-id=71 op=UNLOAD Jul 2 08:57:39.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit: BPF prog-id=91 op=LOAD Jul 2 08:57:39.920000 audit: BPF prog-id=49 op=UNLOAD Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit: BPF prog-id=92 op=LOAD Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.921000 audit: BPF prog-id=93 op=LOAD Jul 2 08:57:39.921000 audit: BPF prog-id=50 op=UNLOAD Jul 2 08:57:39.921000 audit: BPF prog-id=51 op=UNLOAD Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit: BPF prog-id=94 op=LOAD Jul 2 08:57:39.922000 audit: BPF prog-id=75 op=UNLOAD Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.923000 audit: BPF prog-id=95 op=LOAD Jul 2 08:57:39.923000 audit: BPF prog-id=63 op=UNLOAD Jul 2 08:57:39.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.924000 audit: BPF prog-id=96 op=LOAD Jul 2 08:57:39.924000 audit: BPF prog-id=67 op=UNLOAD Jul 2 08:57:39.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.929000 audit: BPF prog-id=97 op=LOAD Jul 2 08:57:39.929000 audit: BPF prog-id=52 op=UNLOAD Jul 2 08:57:39.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.929000 audit: BPF prog-id=98 op=LOAD Jul 2 08:57:39.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:39.930000 audit: BPF prog-id=99 op=LOAD Jul 2 08:57:39.930000 audit: BPF prog-id=53 op=UNLOAD Jul 2 08:57:39.930000 audit: BPF prog-id=54 op=UNLOAD Jul 2 08:57:39.949288 systemd[1]: Stopping kubelet.service... Jul 2 08:57:39.973974 systemd[1]: kubelet.service: Deactivated successfully. Jul 2 08:57:39.974215 systemd[1]: Stopped kubelet.service. Jul 2 08:57:39.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:39.974283 systemd[1]: kubelet.service: Consumed 1.492s CPU time. Jul 2 08:57:39.976179 systemd[1]: Starting kubelet.service... Jul 2 08:57:40.862000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=526932 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 08:57:40.866257 kernel: kauditd_printk_skb: 259 callbacks suppressed Jul 2 08:57:40.866436 kernel: audit: type=1400 audit(1719910660.862:802): avc: denied { watch } for pid=1864 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=526932 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 08:57:40.862000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000ada040 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:57:40.892673 kernel: audit: type=1300 audit(1719910660.862:802): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000ada040 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:57:40.892801 kernel: audit: type=1327 audit(1719910660.862:802): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:57:40.862000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:57:43.404056 systemd[1]: Started kubelet.service. Jul 2 08:57:43.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:43.418739 kernel: audit: type=1130 audit(1719910663.406:803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:43.535385 kubelet[2009]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 08:57:43.535385 kubelet[2009]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 08:57:43.535385 kubelet[2009]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 08:57:43.536023 kubelet[2009]: I0702 08:57:43.535552 2009 server.go:204] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 08:57:43.557093 kubelet[2009]: I0702 08:57:43.557050 2009 server.go:487] "Kubelet version" kubeletVersion="v1.29.2" Jul 2 08:57:43.557093 kubelet[2009]: I0702 08:57:43.557092 2009 server.go:489] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 08:57:43.557400 kubelet[2009]: I0702 08:57:43.557374 2009 server.go:919] "Client rotation is on, will bootstrap in background" Jul 2 08:57:43.560397 kubelet[2009]: I0702 08:57:43.559567 2009 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 2 08:57:43.575490 kubelet[2009]: I0702 08:57:43.575438 2009 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 08:57:43.602898 kubelet[2009]: I0702 08:57:43.602832 2009 server.go:745] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 08:57:43.603086 kubelet[2009]: I0702 08:57:43.603069 2009 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 08:57:43.603287 kubelet[2009]: I0702 08:57:43.603245 2009 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 08:57:43.603410 kubelet[2009]: I0702 08:57:43.603295 2009 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 08:57:43.603410 kubelet[2009]: I0702 08:57:43.603308 2009 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 08:57:43.603410 kubelet[2009]: I0702 08:57:43.603337 2009 state_mem.go:36] "Initialized new in-memory state store" Jul 2 08:57:43.603517 kubelet[2009]: I0702 08:57:43.603418 2009 kubelet.go:396] "Attempting to sync node with API server" Jul 2 08:57:43.603517 kubelet[2009]: I0702 08:57:43.603435 2009 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 08:57:43.604679 kubelet[2009]: I0702 08:57:43.604641 2009 kubelet.go:312] "Adding apiserver pod source" Jul 2 08:57:43.604826 kubelet[2009]: I0702 08:57:43.604813 2009 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 08:57:43.614854 kubelet[2009]: I0702 08:57:43.614829 2009 kuberuntime_manager.go:258] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 08:57:43.615217 kubelet[2009]: I0702 08:57:43.615205 2009 kubelet.go:809] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 2 08:57:43.615742 kubelet[2009]: I0702 08:57:43.615730 2009 server.go:1256] "Started kubelet" Jul 2 08:57:43.630000 audit[2009]: AVC avc: denied { mac_admin } for pid=2009 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:43.633478 kubelet[2009]: I0702 08:57:43.633456 2009 kubelet.go:1417] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 08:57:43.633632 kubelet[2009]: I0702 08:57:43.633618 2009 kubelet.go:1421] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 08:57:43.633735 kubelet[2009]: I0702 08:57:43.633724 2009 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 08:57:43.630000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:57:43.636550 kernel: audit: type=1400 audit(1719910663.630:804): avc: denied { mac_admin } for pid=2009 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:43.636636 kernel: audit: type=1401 audit(1719910663.630:804): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:57:43.630000 audit[2009]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cfa750 a1=c000ca0a08 a2=c000cfa720 a3=25 items=0 ppid=1 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:43.640711 kubelet[2009]: I0702 08:57:43.640685 2009 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 08:57:43.642256 kubelet[2009]: I0702 08:57:43.642240 2009 server.go:461] "Adding debug handlers to kubelet server" Jul 2 08:57:43.642656 kernel: audit: type=1300 audit(1719910663.630:804): arch=c000003e syscall=188 success=no exit=-22 a0=c000cfa750 a1=c000ca0a08 a2=c000cfa720 a3=25 items=0 ppid=1 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:43.630000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:57:43.648652 kernel: audit: type=1327 audit(1719910663.630:804): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:57:43.648896 kubelet[2009]: I0702 08:57:43.648875 2009 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 08:57:43.632000 audit[2009]: AVC avc: denied { mac_admin } for pid=2009 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:43.651230 kubelet[2009]: I0702 08:57:43.651215 2009 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 2 08:57:43.651481 kubelet[2009]: I0702 08:57:43.651469 2009 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 08:57:43.653609 kernel: audit: type=1400 audit(1719910663.632:805): avc: denied { mac_admin } for pid=2009 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:43.653995 kubelet[2009]: I0702 08:57:43.653979 2009 factory.go:221] Registration of the systemd container factory successfully Jul 2 08:57:43.654233 kubelet[2009]: I0702 08:57:43.654163 2009 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 2 08:57:43.658618 kubelet[2009]: E0702 08:57:43.658576 2009 kubelet.go:1462] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 08:57:43.659342 kubelet[2009]: I0702 08:57:43.659330 2009 reconciler_new.go:29] "Reconciler: start to sync state" Jul 2 08:57:43.659458 kubelet[2009]: I0702 08:57:43.659447 2009 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Jul 2 08:57:43.664773 kubelet[2009]: I0702 08:57:43.664756 2009 factory.go:221] Registration of the containerd container factory successfully Jul 2 08:57:43.632000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:57:43.669858 kubelet[2009]: I0702 08:57:43.669836 2009 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 08:57:43.673930 kernel: audit: type=1401 audit(1719910663.632:805): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:57:43.632000 audit[2009]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c9ff80 a1=c000ca0a20 a2=c000cfa7e0 a3=25 items=0 ppid=1 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:43.632000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:57:43.674271 kubelet[2009]: I0702 08:57:43.674253 2009 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 08:57:43.674370 kubelet[2009]: I0702 08:57:43.674359 2009 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 08:57:43.674454 kubelet[2009]: I0702 08:57:43.674443 2009 kubelet.go:2329] "Starting kubelet main sync loop" Jul 2 08:57:43.674931 kubelet[2009]: E0702 08:57:43.674917 2009 kubelet.go:2353] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 08:57:43.735558 kubelet[2009]: I0702 08:57:43.735521 2009 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 08:57:43.735558 kubelet[2009]: I0702 08:57:43.735543 2009 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 08:57:43.735558 kubelet[2009]: I0702 08:57:43.735558 2009 state_mem.go:36] "Initialized new in-memory state store" Jul 2 08:57:43.736004 kubelet[2009]: I0702 08:57:43.735746 2009 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 2 08:57:43.736004 kubelet[2009]: I0702 08:57:43.735768 2009 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 2 08:57:43.736004 kubelet[2009]: I0702 08:57:43.735775 2009 policy_none.go:49] "None policy: Start" Jul 2 08:57:43.737676 kubelet[2009]: I0702 08:57:43.737650 2009 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 2 08:57:43.737676 kubelet[2009]: I0702 08:57:43.737677 2009 state_mem.go:35] "Initializing new in-memory state store" Jul 2 08:57:43.737857 kubelet[2009]: I0702 08:57:43.737834 2009 state_mem.go:75] "Updated machine memory state" Jul 2 08:57:43.746827 kubelet[2009]: I0702 08:57:43.746804 2009 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 08:57:43.747102 kubelet[2009]: I0702 08:57:43.747062 2009 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 08:57:43.747495 kubelet[2009]: I0702 08:57:43.747483 2009 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 08:57:43.746000 audit[2009]: AVC avc: denied { mac_admin } for pid=2009 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:43.746000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:57:43.746000 audit[2009]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0011761e0 a1=c00114fad0 a2=c0011761b0 a3=25 items=0 ppid=1 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:43.746000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:57:43.756620 kubelet[2009]: I0702 08:57:43.756567 2009 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.775119 kubelet[2009]: I0702 08:57:43.775072 2009 kubelet_node_status.go:112] "Node was previously registered" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.775119 kubelet[2009]: I0702 08:57:43.775183 2009 kubelet_node_status.go:76] "Successfully registered node" node="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.775380 kubelet[2009]: I0702 08:57:43.775339 2009 topology_manager.go:215] "Topology Admit Handler" podUID="538bd738902d8dccc719bd3aaafa7bee" podNamespace="kube-system" podName="kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.780342 kubelet[2009]: I0702 08:57:43.775433 2009 topology_manager.go:215] "Topology Admit Handler" podUID="43a76d4e9d6641378072a5f12806332e" podNamespace="kube-system" podName="kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.780342 kubelet[2009]: I0702 08:57:43.775481 2009 topology_manager.go:215] "Topology Admit Handler" podUID="5f82d0d8189e0be4466d3f221b54acc2" podNamespace="kube-system" podName="kube-scheduler-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.795893 kubelet[2009]: W0702 08:57:43.795452 2009 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Jul 2 08:57:43.795893 kubelet[2009]: W0702 08:57:43.795837 2009 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Jul 2 08:57:43.796304 kubelet[2009]: W0702 08:57:43.795938 2009 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Jul 2 08:57:43.796304 kubelet[2009]: E0702 08:57:43.796173 2009 kubelet.go:1921] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal\" already exists" pod="kube-system/kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.796304 kubelet[2009]: E0702 08:57:43.796127 2009 kubelet.go:1921] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal\" already exists" pod="kube-system/kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.861518 kubelet[2009]: I0702 08:57:43.861444 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/538bd738902d8dccc719bd3aaafa7bee-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"538bd738902d8dccc719bd3aaafa7bee\") " pod="kube-system/kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.861728 kubelet[2009]: I0702 08:57:43.861545 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/43a76d4e9d6641378072a5f12806332e-ca-certs\") pod \"kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"43a76d4e9d6641378072a5f12806332e\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.861800 kubelet[2009]: I0702 08:57:43.861729 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/43a76d4e9d6641378072a5f12806332e-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"43a76d4e9d6641378072a5f12806332e\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.861873 kubelet[2009]: I0702 08:57:43.861821 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/43a76d4e9d6641378072a5f12806332e-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"43a76d4e9d6641378072a5f12806332e\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.862858 kubelet[2009]: I0702 08:57:43.862820 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/43a76d4e9d6641378072a5f12806332e-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"43a76d4e9d6641378072a5f12806332e\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.863037 kubelet[2009]: I0702 08:57:43.863022 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/538bd738902d8dccc719bd3aaafa7bee-k8s-certs\") pod \"kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"538bd738902d8dccc719bd3aaafa7bee\") " pod="kube-system/kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.863186 kubelet[2009]: I0702 08:57:43.863165 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/43a76d4e9d6641378072a5f12806332e-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"43a76d4e9d6641378072a5f12806332e\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.863364 kubelet[2009]: I0702 08:57:43.863346 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5f82d0d8189e0be4466d3f221b54acc2-kubeconfig\") pod \"kube-scheduler-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"5f82d0d8189e0be4466d3f221b54acc2\") " pod="kube-system/kube-scheduler-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:43.863509 kubelet[2009]: I0702 08:57:43.863478 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/538bd738902d8dccc719bd3aaafa7bee-ca-certs\") pod \"kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal\" (UID: \"538bd738902d8dccc719bd3aaafa7bee\") " pod="kube-system/kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:44.606656 kubelet[2009]: I0702 08:57:44.606559 2009 apiserver.go:52] "Watching apiserver" Jul 2 08:57:44.659770 kubelet[2009]: I0702 08:57:44.659691 2009 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Jul 2 08:57:44.811941 kubelet[2009]: W0702 08:57:44.811896 2009 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Jul 2 08:57:44.812238 kubelet[2009]: E0702 08:57:44.812223 2009 kubelet.go:1921] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal\" already exists" pod="kube-system/kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:57:44.913291 kubelet[2009]: I0702 08:57:44.913140 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510-3-5-e-e1038c2d1d.novalocal" podStartSLOduration=1.913064537 podStartE2EDuration="1.913064537s" podCreationTimestamp="2024-07-02 08:57:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 08:57:44.835872738 +0000 UTC m=+1.389305215" watchObservedRunningTime="2024-07-02 08:57:44.913064537 +0000 UTC m=+1.466497004" Jul 2 08:57:44.985956 kubelet[2009]: I0702 08:57:44.985874 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510-3-5-e-e1038c2d1d.novalocal" podStartSLOduration=5.985683856 podStartE2EDuration="5.985683856s" podCreationTimestamp="2024-07-02 08:57:39 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 08:57:44.982626579 +0000 UTC m=+1.536059066" watchObservedRunningTime="2024-07-02 08:57:44.985683856 +0000 UTC m=+1.539116333" Jul 2 08:57:44.986872 kubelet[2009]: I0702 08:57:44.986796 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510-3-5-e-e1038c2d1d.novalocal" podStartSLOduration=6.986682731 podStartE2EDuration="6.986682731s" podCreationTimestamp="2024-07-02 08:57:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 08:57:44.91453194 +0000 UTC m=+1.467964397" watchObservedRunningTime="2024-07-02 08:57:44.986682731 +0000 UTC m=+1.540115228" Jul 2 08:57:50.344214 sudo[1316]: pam_unix(sudo:session): session closed for user root Jul 2 08:57:50.344000 audit[1316]: USER_END pid=1316 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:57:50.346292 kernel: kauditd_printk_skb: 6 callbacks suppressed Jul 2 08:57:50.346417 kernel: audit: type=1106 audit(1719910670.344:807): pid=1316 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:57:50.350672 kernel: audit: type=1104 audit(1719910670.344:808): pid=1316 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:57:50.344000 audit[1316]: CRED_DISP pid=1316 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:57:50.551265 sshd[1312]: pam_unix(sshd:session): session closed for user core Jul 2 08:57:50.553000 audit[1312]: USER_END pid=1312 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:57:50.556773 systemd[1]: sshd@8-172.24.4.229:22-172.24.4.1:58998.service: Deactivated successfully. Jul 2 08:57:50.558123 systemd[1]: session-9.scope: Deactivated successfully. Jul 2 08:57:50.558360 systemd[1]: session-9.scope: Consumed 7.520s CPU time. Jul 2 08:57:50.561908 systemd-logind[1128]: Session 9 logged out. Waiting for processes to exit. Jul 2 08:57:50.564437 systemd-logind[1128]: Removed session 9. Jul 2 08:57:50.553000 audit[1312]: CRED_DISP pid=1312 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:57:50.574405 kernel: audit: type=1106 audit(1719910670.553:809): pid=1312 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:57:50.574628 kernel: audit: type=1104 audit(1719910670.553:810): pid=1312 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:57:50.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.229:22-172.24.4.1:58998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:50.584761 kernel: audit: type=1131 audit(1719910670.553:811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.229:22-172.24.4.1:58998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:57:51.427000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:51.439093 kernel: audit: type=1400 audit(1719910671.427:812): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:51.427000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00128a4e0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:57:51.427000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:57:51.450879 kernel: audit: type=1300 audit(1719910671.427:812): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00128a4e0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:57:51.451026 kernel: audit: type=1327 audit(1719910671.427:812): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:57:51.451056 kernel: audit: type=1400 audit(1719910671.433:813): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:51.433000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:51.433000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00128a6a0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:57:51.461135 kernel: audit: type=1300 audit(1719910671.433:813): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00128a6a0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:57:51.433000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:57:51.433000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:51.433000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00128a880 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:57:51.433000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:57:51.437000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:57:51.437000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00128aa20 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:57:51.437000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:57:52.491652 kubelet[2009]: I0702 08:57:52.491618 2009 kuberuntime_manager.go:1529] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 2 08:57:52.492248 env[1136]: time="2024-07-02T08:57:52.492205871Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 2 08:57:52.492779 kubelet[2009]: I0702 08:57:52.492759 2009 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 2 08:57:53.365527 kubelet[2009]: I0702 08:57:53.365235 2009 topology_manager.go:215] "Topology Admit Handler" podUID="5e8ba0f7-913a-4432-87a5-1edf312dca23" podNamespace="kube-system" podName="kube-proxy-pfmzj" Jul 2 08:57:53.386696 systemd[1]: Created slice kubepods-besteffort-pod5e8ba0f7_913a_4432_87a5_1edf312dca23.slice. Jul 2 08:57:53.525095 kubelet[2009]: I0702 08:57:53.525052 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5e8ba0f7-913a-4432-87a5-1edf312dca23-xtables-lock\") pod \"kube-proxy-pfmzj\" (UID: \"5e8ba0f7-913a-4432-87a5-1edf312dca23\") " pod="kube-system/kube-proxy-pfmzj" Jul 2 08:57:53.525095 kubelet[2009]: I0702 08:57:53.525111 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5e8ba0f7-913a-4432-87a5-1edf312dca23-lib-modules\") pod \"kube-proxy-pfmzj\" (UID: \"5e8ba0f7-913a-4432-87a5-1edf312dca23\") " pod="kube-system/kube-proxy-pfmzj" Jul 2 08:57:53.525471 kubelet[2009]: I0702 08:57:53.525142 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-twmj4\" (UniqueName: \"kubernetes.io/projected/5e8ba0f7-913a-4432-87a5-1edf312dca23-kube-api-access-twmj4\") pod \"kube-proxy-pfmzj\" (UID: \"5e8ba0f7-913a-4432-87a5-1edf312dca23\") " pod="kube-system/kube-proxy-pfmzj" Jul 2 08:57:53.525471 kubelet[2009]: I0702 08:57:53.525189 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/5e8ba0f7-913a-4432-87a5-1edf312dca23-kube-proxy\") pod \"kube-proxy-pfmzj\" (UID: \"5e8ba0f7-913a-4432-87a5-1edf312dca23\") " pod="kube-system/kube-proxy-pfmzj" Jul 2 08:57:53.655371 kubelet[2009]: I0702 08:57:53.655250 2009 topology_manager.go:215] "Topology Admit Handler" podUID="e32a231b-ea0d-4fbe-9080-878c3a0d9788" podNamespace="tigera-operator" podName="tigera-operator-76c4974c85-4k7s6" Jul 2 08:57:53.667297 systemd[1]: Created slice kubepods-besteffort-pode32a231b_ea0d_4fbe_9080_878c3a0d9788.slice. Jul 2 08:57:53.701652 env[1136]: time="2024-07-02T08:57:53.701132838Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-pfmzj,Uid:5e8ba0f7-913a-4432-87a5-1edf312dca23,Namespace:kube-system,Attempt:0,}" Jul 2 08:57:53.749289 env[1136]: time="2024-07-02T08:57:53.749220980Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:57:53.749525 env[1136]: time="2024-07-02T08:57:53.749500496Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:57:53.749648 env[1136]: time="2024-07-02T08:57:53.749625530Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:57:53.755449 env[1136]: time="2024-07-02T08:57:53.755399132Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dfb8746ab792b4a586625354a8cc005f064aa34ed44556ab4e7c58ea718abb6f pid=2088 runtime=io.containerd.runc.v2 Jul 2 08:57:53.788005 systemd[1]: Started cri-containerd-dfb8746ab792b4a586625354a8cc005f064aa34ed44556ab4e7c58ea718abb6f.scope. Jul 2 08:57:53.836253 kubelet[2009]: I0702 08:57:53.836201 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/e32a231b-ea0d-4fbe-9080-878c3a0d9788-var-lib-calico\") pod \"tigera-operator-76c4974c85-4k7s6\" (UID: \"e32a231b-ea0d-4fbe-9080-878c3a0d9788\") " pod="tigera-operator/tigera-operator-76c4974c85-4k7s6" Jul 2 08:57:53.836428 kubelet[2009]: I0702 08:57:53.836268 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xlpm9\" (UniqueName: \"kubernetes.io/projected/e32a231b-ea0d-4fbe-9080-878c3a0d9788-kube-api-access-xlpm9\") pod \"tigera-operator-76c4974c85-4k7s6\" (UID: \"e32a231b-ea0d-4fbe-9080-878c3a0d9788\") " pod="tigera-operator/tigera-operator-76c4974c85-4k7s6" Jul 2 08:57:53.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.848000 audit: BPF prog-id=100 op=LOAD Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2088 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:53.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466623837343661623739326234613538363632353335346138636330 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2088 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:53.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466623837343661623739326234613538363632353335346138636330 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit: BPF prog-id=101 op=LOAD Jul 2 08:57:53.849000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003307f0 items=0 ppid=2088 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:53.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466623837343661623739326234613538363632353335346138636330 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit: BPF prog-id=102 op=LOAD Jul 2 08:57:53.849000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000330838 items=0 ppid=2088 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:53.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466623837343661623739326234613538363632353335346138636330 Jul 2 08:57:53.849000 audit: BPF prog-id=102 op=UNLOAD Jul 2 08:57:53.849000 audit: BPF prog-id=101 op=UNLOAD Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.849000 audit: BPF prog-id=103 op=LOAD Jul 2 08:57:53.849000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000330c48 items=0 ppid=2088 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:53.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466623837343661623739326234613538363632353335346138636330 Jul 2 08:57:53.871900 env[1136]: time="2024-07-02T08:57:53.871841304Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-pfmzj,Uid:5e8ba0f7-913a-4432-87a5-1edf312dca23,Namespace:kube-system,Attempt:0,} returns sandbox id \"dfb8746ab792b4a586625354a8cc005f064aa34ed44556ab4e7c58ea718abb6f\"" Jul 2 08:57:53.879434 env[1136]: time="2024-07-02T08:57:53.879400776Z" level=info msg="CreateContainer within sandbox \"dfb8746ab792b4a586625354a8cc005f064aa34ed44556ab4e7c58ea718abb6f\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 2 08:57:53.904837 env[1136]: time="2024-07-02T08:57:53.904793081Z" level=info msg="CreateContainer within sandbox \"dfb8746ab792b4a586625354a8cc005f064aa34ed44556ab4e7c58ea718abb6f\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"e3cb751de643d873dafb77a4d9330b0b11589070ac91ec0eaf78305798532b53\"" Jul 2 08:57:53.906001 env[1136]: time="2024-07-02T08:57:53.905912982Z" level=info msg="StartContainer for \"e3cb751de643d873dafb77a4d9330b0b11589070ac91ec0eaf78305798532b53\"" Jul 2 08:57:53.932391 systemd[1]: Started cri-containerd-e3cb751de643d873dafb77a4d9330b0b11589070ac91ec0eaf78305798532b53.scope. Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f6ee9582878 items=0 ppid=2088 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:53.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636237353164653634336438373364616662373761346439333330 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit: BPF prog-id=104 op=LOAD Jul 2 08:57:53.959000 audit[2131]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0003de008 items=0 ppid=2088 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:53.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636237353164653634336438373364616662373761346439333330 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.959000 audit: BPF prog-id=105 op=LOAD Jul 2 08:57:53.959000 audit[2131]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0003de058 items=0 ppid=2088 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:53.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636237353164653634336438373364616662373761346439333330 Jul 2 08:57:53.959000 audit: BPF prog-id=105 op=UNLOAD Jul 2 08:57:53.960000 audit: BPF prog-id=104 op=UNLOAD Jul 2 08:57:53.960000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.960000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.960000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.960000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.960000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.960000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.960000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.960000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.960000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.960000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:53.960000 audit: BPF prog-id=106 op=LOAD Jul 2 08:57:53.960000 audit[2131]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0003de0e8 items=0 ppid=2088 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:53.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636237353164653634336438373364616662373761346439333330 Jul 2 08:57:53.980509 env[1136]: time="2024-07-02T08:57:53.980432339Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4974c85-4k7s6,Uid:e32a231b-ea0d-4fbe-9080-878c3a0d9788,Namespace:tigera-operator,Attempt:0,}" Jul 2 08:57:53.984612 env[1136]: time="2024-07-02T08:57:53.984532100Z" level=info msg="StartContainer for \"e3cb751de643d873dafb77a4d9330b0b11589070ac91ec0eaf78305798532b53\" returns successfully" Jul 2 08:57:54.028175 env[1136]: time="2024-07-02T08:57:54.027989864Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:57:54.028175 env[1136]: time="2024-07-02T08:57:54.028103567Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:57:54.028680 env[1136]: time="2024-07-02T08:57:54.028528395Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:57:54.029279 env[1136]: time="2024-07-02T08:57:54.029183093Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/15e67c75e4f916b4fbb8f9e5a1449c367cd6cb9d32d742db65569dfc0eb7ac16 pid=2166 runtime=io.containerd.runc.v2 Jul 2 08:57:54.057569 systemd[1]: Started cri-containerd-15e67c75e4f916b4fbb8f9e5a1449c367cd6cb9d32d742db65569dfc0eb7ac16.scope. Jul 2 08:57:54.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.080000 audit: BPF prog-id=107 op=LOAD Jul 2 08:57:54.081000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.081000 audit[2176]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c7c48 a2=10 a3=1c items=0 ppid=2166 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135653637633735653466393136623466626238663965356131343439 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c76b0 a2=3c a3=c items=0 ppid=2166 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135653637633735653466393136623466626238663965356131343439 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit: BPF prog-id=108 op=LOAD Jul 2 08:57:54.082000 audit[2176]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c79d8 a2=78 a3=c0003ef080 items=0 ppid=2166 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135653637633735653466393136623466626238663965356131343439 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.082000 audit: BPF prog-id=109 op=LOAD Jul 2 08:57:54.082000 audit[2176]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7770 a2=78 a3=c0003ef0c8 items=0 ppid=2166 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135653637633735653466393136623466626238663965356131343439 Jul 2 08:57:54.083000 audit: BPF prog-id=109 op=UNLOAD Jul 2 08:57:54.083000 audit: BPF prog-id=108 op=UNLOAD Jul 2 08:57:54.083000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.083000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.083000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.083000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.083000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.083000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.083000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.083000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.083000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.083000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:54.083000 audit: BPF prog-id=110 op=LOAD Jul 2 08:57:54.083000 audit[2176]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c7c30 a2=78 a3=c0003ef4d8 items=0 ppid=2166 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135653637633735653466393136623466626238663965356131343439 Jul 2 08:57:54.129715 env[1136]: time="2024-07-02T08:57:54.129647128Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4974c85-4k7s6,Uid:e32a231b-ea0d-4fbe-9080-878c3a0d9788,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"15e67c75e4f916b4fbb8f9e5a1449c367cd6cb9d32d742db65569dfc0eb7ac16\"" Jul 2 08:57:54.134335 env[1136]: time="2024-07-02T08:57:54.133753482Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\"" Jul 2 08:57:54.350000 audit[2223]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.350000 audit[2223]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff0ba3c900 a2=0 a3=7fff0ba3c8ec items=0 ppid=2142 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.350000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 08:57:54.352000 audit[2224]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.352000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe04440e60 a2=0 a3=7ffe04440e4c items=0 ppid=2142 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.352000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 08:57:54.354000 audit[2225]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.354000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdc0e25ef0 a2=0 a3=7ffdc0e25edc items=0 ppid=2142 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.354000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 08:57:54.355000 audit[2226]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.355000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde30fcca0 a2=0 a3=7ffde30fcc8c items=0 ppid=2142 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.355000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 08:57:54.357000 audit[2227]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.358000 audit[2228]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.358000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffee5321950 a2=0 a3=7ffee532193c items=0 ppid=2142 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.358000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 08:57:54.357000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffefcbad6a0 a2=0 a3=7ffefcbad68c items=0 ppid=2142 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.357000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 08:57:54.467000 audit[2229]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.467000 audit[2229]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fffd0b59860 a2=0 a3=7fffd0b5984c items=0 ppid=2142 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.467000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 08:57:54.476000 audit[2231]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2231 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.476000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd5afb4160 a2=0 a3=7ffd5afb414c items=0 ppid=2142 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.476000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 2 08:57:54.486000 audit[2234]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.486000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd985ac1c0 a2=0 a3=7ffd985ac1ac items=0 ppid=2142 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.486000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 2 08:57:54.489000 audit[2235]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.489000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff6b3cdbb0 a2=0 a3=7fff6b3cdb9c items=0 ppid=2142 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.489000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 08:57:54.500000 audit[2237]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.500000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd43a217d0 a2=0 a3=7ffd43a217bc items=0 ppid=2142 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.500000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 08:57:54.506000 audit[2238]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.506000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe1db85120 a2=0 a3=7ffe1db8510c items=0 ppid=2142 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.506000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 08:57:54.518000 audit[2240]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2240 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.518000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffd5e1d030 a2=0 a3=7fffd5e1d01c items=0 ppid=2142 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.518000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 08:57:54.534000 audit[2243]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.534000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcc5f1b190 a2=0 a3=7ffcc5f1b17c items=0 ppid=2142 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.534000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 2 08:57:54.540000 audit[2244]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.540000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe49b9bcf0 a2=0 a3=7ffe49b9bcdc items=0 ppid=2142 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.540000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 08:57:54.561000 audit[2246]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.561000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcfaf0bfb0 a2=0 a3=7ffcfaf0bf9c items=0 ppid=2142 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.561000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 08:57:54.565000 audit[2247]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.565000 audit[2247]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe24736170 a2=0 a3=7ffe2473615c items=0 ppid=2142 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.565000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 08:57:54.575000 audit[2249]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2249 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.575000 audit[2249]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffefb9920a0 a2=0 a3=7ffefb99208c items=0 ppid=2142 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.575000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 08:57:54.595000 audit[2252]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.595000 audit[2252]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff64565fa0 a2=0 a3=7fff64565f8c items=0 ppid=2142 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.595000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 08:57:54.605000 audit[2255]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.605000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd91b104b0 a2=0 a3=7ffd91b1049c items=0 ppid=2142 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.605000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 08:57:54.608000 audit[2256]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2256 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.608000 audit[2256]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd36375ca0 a2=0 a3=7ffd36375c8c items=0 ppid=2142 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.608000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 08:57:54.611000 audit[2258]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.611000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffcce30b390 a2=0 a3=7ffcce30b37c items=0 ppid=2142 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.611000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 08:57:54.615000 audit[2261]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.615000 audit[2261]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe03108890 a2=0 a3=7ffe0310887c items=0 ppid=2142 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.615000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 08:57:54.616000 audit[2262]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.616000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd3b83ed10 a2=0 a3=7ffd3b83ecfc items=0 ppid=2142 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.616000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 08:57:54.619000 audit[2264]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:57:54.619000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe3e1bc2b0 a2=0 a3=7ffe3e1bc29c items=0 ppid=2142 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.619000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 08:57:54.650000 audit[2270]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2270 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:57:54.650000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffeaa5ce940 a2=0 a3=7ffeaa5ce92c items=0 ppid=2142 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.650000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:57:54.659000 audit[2270]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2270 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:57:54.659000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffeaa5ce940 a2=0 a3=7ffeaa5ce92c items=0 ppid=2142 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.659000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:57:54.664000 audit[2275]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2275 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.664000 audit[2275]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffeccc739d0 a2=0 a3=7ffeccc739bc items=0 ppid=2142 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.664000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 08:57:54.675324 systemd[1]: run-containerd-runc-k8s.io-dfb8746ab792b4a586625354a8cc005f064aa34ed44556ab4e7c58ea718abb6f-runc.WtXlNh.mount: Deactivated successfully. Jul 2 08:57:54.667000 audit[2277]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2277 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.667000 audit[2277]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe79bcec10 a2=0 a3=7ffe79bcebfc items=0 ppid=2142 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.667000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 2 08:57:54.685000 audit[2280]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2280 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.685000 audit[2280]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffcab82dd80 a2=0 a3=7ffcab82dd6c items=0 ppid=2142 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.685000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 2 08:57:54.686000 audit[2281]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2281 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.686000 audit[2281]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff57d3bd60 a2=0 a3=7fff57d3bd4c items=0 ppid=2142 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.686000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 08:57:54.689000 audit[2283]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2283 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.689000 audit[2283]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd686ee120 a2=0 a3=7ffd686ee10c items=0 ppid=2142 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.689000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 08:57:54.690000 audit[2284]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2284 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.690000 audit[2284]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd3ea41a60 a2=0 a3=7ffd3ea41a4c items=0 ppid=2142 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.690000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 08:57:54.693000 audit[2286]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2286 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.693000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe7059ed50 a2=0 a3=7ffe7059ed3c items=0 ppid=2142 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.693000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 2 08:57:54.697000 audit[2289]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.697000 audit[2289]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffef731ac50 a2=0 a3=7ffef731ac3c items=0 ppid=2142 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.697000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 08:57:54.698000 audit[2290]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.698000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff777ea480 a2=0 a3=7fff777ea46c items=0 ppid=2142 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.698000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 08:57:54.701000 audit[2292]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2292 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.701000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffff2f04380 a2=0 a3=7ffff2f0436c items=0 ppid=2142 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.701000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 08:57:54.703000 audit[2293]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.703000 audit[2293]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffbfa3c7b0 a2=0 a3=7fffbfa3c79c items=0 ppid=2142 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.703000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 08:57:54.709000 audit[2295]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.709000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffce2d801d0 a2=0 a3=7ffce2d801bc items=0 ppid=2142 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.709000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 08:57:54.713000 audit[2298]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.713000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffa49fdaa0 a2=0 a3=7fffa49fda8c items=0 ppid=2142 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.713000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 08:57:54.718000 audit[2301]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.718000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff4aa364e0 a2=0 a3=7fff4aa364cc items=0 ppid=2142 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.718000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 2 08:57:54.719000 audit[2302]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.719000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdf21a8770 a2=0 a3=7ffdf21a875c items=0 ppid=2142 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.719000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 08:57:54.721000 audit[2304]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.721000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd231de670 a2=0 a3=7ffd231de65c items=0 ppid=2142 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.721000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 08:57:54.725000 audit[2307]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.725000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fffc18d6f50 a2=0 a3=7fffc18d6f3c items=0 ppid=2142 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.725000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 08:57:54.726000 audit[2308]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2308 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.726000 audit[2308]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff91b28c30 a2=0 a3=7fff91b28c1c items=0 ppid=2142 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.726000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 08:57:54.729000 audit[2310]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.729000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe5190c250 a2=0 a3=7ffe5190c23c items=0 ppid=2142 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.729000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 08:57:54.730000 audit[2311]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.730000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff26fef340 a2=0 a3=7fff26fef32c items=0 ppid=2142 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.730000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 08:57:54.733000 audit[2313]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.733000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd212dea90 a2=0 a3=7ffd212dea7c items=0 ppid=2142 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.733000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 08:57:54.738000 audit[2316]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:57:54.738000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff8a7b4400 a2=0 a3=7fff8a7b43ec items=0 ppid=2142 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.738000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 08:57:54.744000 audit[2318]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2318 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 08:57:54.744000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=2004 a0=3 a1=7ffe34853d80 a2=0 a3=7ffe34853d6c items=0 ppid=2142 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.744000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:57:54.744000 audit[2318]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 08:57:54.744000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffe34853d80 a2=0 a3=7ffe34853d6c items=0 ppid=2142 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:54.744000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:57:54.758906 kubelet[2009]: I0702 08:57:54.758868 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-pfmzj" podStartSLOduration=1.758792753 podStartE2EDuration="1.758792753s" podCreationTimestamp="2024-07-02 08:57:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 08:57:54.758650587 +0000 UTC m=+11.312083034" watchObservedRunningTime="2024-07-02 08:57:54.758792753 +0000 UTC m=+11.312225190" Jul 2 08:57:56.214539 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3936939782.mount: Deactivated successfully. Jul 2 08:57:58.388090 env[1136]: time="2024-07-02T08:57:58.387957959Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:58.392216 env[1136]: time="2024-07-02T08:57:58.392177063Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:58.395023 env[1136]: time="2024-07-02T08:57:58.394978618Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:58.397266 env[1136]: time="2024-07-02T08:57:58.397239359Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:479ddc7ff9ab095058b96f6710bbf070abada86332e267d6e5dcc1df36ba2cc5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:57:58.397913 env[1136]: time="2024-07-02T08:57:58.397884860Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\" returns image reference \"sha256:01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d\"" Jul 2 08:57:58.401652 env[1136]: time="2024-07-02T08:57:58.401616300Z" level=info msg="CreateContainer within sandbox \"15e67c75e4f916b4fbb8f9e5a1449c367cd6cb9d32d742db65569dfc0eb7ac16\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 2 08:57:58.440459 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3634450447.mount: Deactivated successfully. Jul 2 08:57:58.453888 env[1136]: time="2024-07-02T08:57:58.453822661Z" level=info msg="CreateContainer within sandbox \"15e67c75e4f916b4fbb8f9e5a1449c367cd6cb9d32d742db65569dfc0eb7ac16\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"c6c81ed1a31e45ae999cd921b47e2508cfeb0f6432c53f6bdf44fb554a802370\"" Jul 2 08:57:58.454819 env[1136]: time="2024-07-02T08:57:58.454789404Z" level=info msg="StartContainer for \"c6c81ed1a31e45ae999cd921b47e2508cfeb0f6432c53f6bdf44fb554a802370\"" Jul 2 08:57:58.491907 systemd[1]: Started cri-containerd-c6c81ed1a31e45ae999cd921b47e2508cfeb0f6432c53f6bdf44fb554a802370.scope. Jul 2 08:57:58.509934 kernel: kauditd_printk_skb: 317 callbacks suppressed Jul 2 08:57:58.510050 kernel: audit: type=1400 audit(1719910678.506:909): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.527179 kernel: audit: type=1400 audit(1719910678.506:910): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.527260 kernel: audit: type=1400 audit(1719910678.506:911): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.527290 kernel: audit: type=1400 audit(1719910678.506:912): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.535598 kernel: audit: type=1400 audit(1719910678.506:913): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.544035 kernel: audit: type=1400 audit(1719910678.506:914): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.544106 kernel: audit: type=1400 audit(1719910678.506:915): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.544741 kernel: audit: type=1400 audit(1719910678.506:916): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.553603 kernel: audit: type=1400 audit(1719910678.506:917): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.553673 kernel: audit: type=1400 audit(1719910678.516:918): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit: BPF prog-id=111 op=LOAD Jul 2 08:57:58.516000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit[2326]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2166 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:58.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336633831656431613331653435616539393963643932316234376532 Jul 2 08:57:58.516000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit[2326]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2166 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:58.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336633831656431613331653435616539393963643932316234376532 Jul 2 08:57:58.516000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.516000 audit: BPF prog-id=112 op=LOAD Jul 2 08:57:58.516000 audit[2326]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000fe950 items=0 ppid=2166 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:58.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336633831656431613331653435616539393963643932316234376532 Jul 2 08:57:58.517000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.517000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.517000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.517000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.517000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.517000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.517000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.517000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.517000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.517000 audit: BPF prog-id=113 op=LOAD Jul 2 08:57:58.517000 audit[2326]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000fe998 items=0 ppid=2166 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:58.517000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336633831656431613331653435616539393963643932316234376532 Jul 2 08:57:58.518000 audit: BPF prog-id=113 op=UNLOAD Jul 2 08:57:58.518000 audit: BPF prog-id=112 op=UNLOAD Jul 2 08:57:58.518000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.518000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.518000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.518000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.518000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.518000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.518000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.518000 audit[2326]: AVC avc: denied { perfmon } for pid=2326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.518000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.518000 audit[2326]: AVC avc: denied { bpf } for pid=2326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:57:58.518000 audit: BPF prog-id=114 op=LOAD Jul 2 08:57:58.518000 audit[2326]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000feda8 items=0 ppid=2166 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:57:58.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336633831656431613331653435616539393963643932316234376532 Jul 2 08:57:58.570032 env[1136]: time="2024-07-02T08:57:58.569931683Z" level=info msg="StartContainer for \"c6c81ed1a31e45ae999cd921b47e2508cfeb0f6432c53f6bdf44fb554a802370\" returns successfully" Jul 2 08:58:01.827000 audit[2359]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:01.827000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffe3b0f9ce0 a2=0 a3=7ffe3b0f9ccc items=0 ppid=2142 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:01.827000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:01.830000 audit[2359]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:01.830000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe3b0f9ce0 a2=0 a3=0 items=0 ppid=2142 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:01.830000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:01.846000 audit[2361]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:01.846000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7fff49bd08f0 a2=0 a3=7fff49bd08dc items=0 ppid=2142 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:01.846000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:01.848000 audit[2361]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:01.848000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff49bd08f0 a2=0 a3=0 items=0 ppid=2142 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:01.848000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:01.988102 kubelet[2009]: I0702 08:58:01.988060 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-76c4974c85-4k7s6" podStartSLOduration=4.721151967 podStartE2EDuration="8.988006304s" podCreationTimestamp="2024-07-02 08:57:53 +0000 UTC" firstStartedPulling="2024-07-02 08:57:54.131425505 +0000 UTC m=+10.684857952" lastFinishedPulling="2024-07-02 08:57:58.398279842 +0000 UTC m=+14.951712289" observedRunningTime="2024-07-02 08:57:58.786175343 +0000 UTC m=+15.339607881" watchObservedRunningTime="2024-07-02 08:58:01.988006304 +0000 UTC m=+18.541438751" Jul 2 08:58:01.988667 kubelet[2009]: I0702 08:58:01.988293 2009 topology_manager.go:215] "Topology Admit Handler" podUID="99562cc8-3281-40de-94ae-0a5cee0b60a2" podNamespace="calico-system" podName="calico-typha-77c74b8dbb-xqxsd" Jul 2 08:58:01.994778 systemd[1]: Created slice kubepods-besteffort-pod99562cc8_3281_40de_94ae_0a5cee0b60a2.slice. Jul 2 08:58:02.095074 kubelet[2009]: I0702 08:58:02.094958 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/99562cc8-3281-40de-94ae-0a5cee0b60a2-tigera-ca-bundle\") pod \"calico-typha-77c74b8dbb-xqxsd\" (UID: \"99562cc8-3281-40de-94ae-0a5cee0b60a2\") " pod="calico-system/calico-typha-77c74b8dbb-xqxsd" Jul 2 08:58:02.095310 kubelet[2009]: I0702 08:58:02.095284 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sdtlq\" (UniqueName: \"kubernetes.io/projected/99562cc8-3281-40de-94ae-0a5cee0b60a2-kube-api-access-sdtlq\") pod \"calico-typha-77c74b8dbb-xqxsd\" (UID: \"99562cc8-3281-40de-94ae-0a5cee0b60a2\") " pod="calico-system/calico-typha-77c74b8dbb-xqxsd" Jul 2 08:58:02.095448 kubelet[2009]: I0702 08:58:02.095433 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/99562cc8-3281-40de-94ae-0a5cee0b60a2-typha-certs\") pod \"calico-typha-77c74b8dbb-xqxsd\" (UID: \"99562cc8-3281-40de-94ae-0a5cee0b60a2\") " pod="calico-system/calico-typha-77c74b8dbb-xqxsd" Jul 2 08:58:02.130686 kubelet[2009]: I0702 08:58:02.130641 2009 topology_manager.go:215] "Topology Admit Handler" podUID="7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" podNamespace="calico-system" podName="calico-node-5nwb2" Jul 2 08:58:02.137250 systemd[1]: Created slice kubepods-besteffort-pod7b22d5ac_d3fa_4e2c_a07d_160a5b754c83.slice. Jul 2 08:58:02.296764 kubelet[2009]: I0702 08:58:02.296734 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-var-run-calico\") pod \"calico-node-5nwb2\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " pod="calico-system/calico-node-5nwb2" Jul 2 08:58:02.296986 kubelet[2009]: I0702 08:58:02.296973 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-flexvol-driver-host\") pod \"calico-node-5nwb2\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " pod="calico-system/calico-node-5nwb2" Jul 2 08:58:02.297119 kubelet[2009]: I0702 08:58:02.297107 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-cni-net-dir\") pod \"calico-node-5nwb2\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " pod="calico-system/calico-node-5nwb2" Jul 2 08:58:02.297234 kubelet[2009]: I0702 08:58:02.297223 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-lib-modules\") pod \"calico-node-5nwb2\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " pod="calico-system/calico-node-5nwb2" Jul 2 08:58:02.297372 kubelet[2009]: I0702 08:58:02.297360 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-tigera-ca-bundle\") pod \"calico-node-5nwb2\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " pod="calico-system/calico-node-5nwb2" Jul 2 08:58:02.297500 kubelet[2009]: I0702 08:58:02.297484 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-cni-log-dir\") pod \"calico-node-5nwb2\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " pod="calico-system/calico-node-5nwb2" Jul 2 08:58:02.297659 kubelet[2009]: I0702 08:58:02.297644 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-node-certs\") pod \"calico-node-5nwb2\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " pod="calico-system/calico-node-5nwb2" Jul 2 08:58:02.297801 kubelet[2009]: I0702 08:58:02.297788 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-policysync\") pod \"calico-node-5nwb2\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " pod="calico-system/calico-node-5nwb2" Jul 2 08:58:02.297919 kubelet[2009]: I0702 08:58:02.297907 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-cni-bin-dir\") pod \"calico-node-5nwb2\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " pod="calico-system/calico-node-5nwb2" Jul 2 08:58:02.298099 kubelet[2009]: I0702 08:58:02.298075 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-74lb2\" (UniqueName: \"kubernetes.io/projected/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-kube-api-access-74lb2\") pod \"calico-node-5nwb2\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " pod="calico-system/calico-node-5nwb2" Jul 2 08:58:02.298217 kubelet[2009]: I0702 08:58:02.298205 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-xtables-lock\") pod \"calico-node-5nwb2\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " pod="calico-system/calico-node-5nwb2" Jul 2 08:58:02.298336 kubelet[2009]: I0702 08:58:02.298324 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-var-lib-calico\") pod \"calico-node-5nwb2\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " pod="calico-system/calico-node-5nwb2" Jul 2 08:58:02.299091 env[1136]: time="2024-07-02T08:58:02.299047822Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-77c74b8dbb-xqxsd,Uid:99562cc8-3281-40de-94ae-0a5cee0b60a2,Namespace:calico-system,Attempt:0,}" Jul 2 08:58:02.317867 kubelet[2009]: I0702 08:58:02.317816 2009 topology_manager.go:215] "Topology Admit Handler" podUID="6f72bbc2-6c33-4033-bc07-2e6f5f55f594" podNamespace="calico-system" podName="csi-node-driver-jqbj5" Jul 2 08:58:02.323164 kubelet[2009]: E0702 08:58:02.318541 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jqbj5" podUID="6f72bbc2-6c33-4033-bc07-2e6f5f55f594" Jul 2 08:58:02.373599 env[1136]: time="2024-07-02T08:58:02.367682248Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:58:02.373599 env[1136]: time="2024-07-02T08:58:02.367738784Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:58:02.373599 env[1136]: time="2024-07-02T08:58:02.367753572Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:58:02.373599 env[1136]: time="2024-07-02T08:58:02.367866374Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de pid=2370 runtime=io.containerd.runc.v2 Jul 2 08:58:02.391400 systemd[1]: Started cri-containerd-e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de.scope. Jul 2 08:58:02.401498 kubelet[2009]: E0702 08:58:02.401478 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.401685 kubelet[2009]: W0702 08:58:02.401671 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.401798 kubelet[2009]: E0702 08:58:02.401777 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.404757 kubelet[2009]: E0702 08:58:02.404736 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.405038 kubelet[2009]: W0702 08:58:02.405020 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.405234 kubelet[2009]: E0702 08:58:02.405196 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.406347 kubelet[2009]: E0702 08:58:02.406336 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.406446 kubelet[2009]: W0702 08:58:02.406434 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.406540 kubelet[2009]: E0702 08:58:02.406530 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.406814 kubelet[2009]: E0702 08:58:02.406803 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.406905 kubelet[2009]: W0702 08:58:02.406893 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.407112 kubelet[2009]: E0702 08:58:02.407099 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.407334 kubelet[2009]: E0702 08:58:02.407323 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.407441 kubelet[2009]: W0702 08:58:02.407429 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.407627 kubelet[2009]: E0702 08:58:02.407614 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.407996 kubelet[2009]: E0702 08:58:02.407870 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.408108 kubelet[2009]: W0702 08:58:02.408091 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.408315 kubelet[2009]: E0702 08:58:02.408304 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.408564 kubelet[2009]: E0702 08:58:02.408539 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.408684 kubelet[2009]: W0702 08:58:02.408670 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.408885 kubelet[2009]: E0702 08:58:02.408873 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.409058 kubelet[2009]: E0702 08:58:02.409046 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.409141 kubelet[2009]: W0702 08:58:02.409128 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.409242 kubelet[2009]: E0702 08:58:02.409231 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.409550 kubelet[2009]: E0702 08:58:02.409536 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.409658 kubelet[2009]: W0702 08:58:02.409644 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.409771 kubelet[2009]: E0702 08:58:02.409760 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.421000 audit: BPF prog-id=115 op=LOAD Jul 2 08:58:02.423000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.423000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2370 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:02.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530636564323535333636313137303737636465366564336530363936 Jul 2 08:58:02.423000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.423000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2370 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:02.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530636564323535333636313137303737636465366564336530363936 Jul 2 08:58:02.423000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.423000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.423000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.423000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.423000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.423000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.423000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.423000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.423000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.423000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.423000 audit: BPF prog-id=116 op=LOAD Jul 2 08:58:02.423000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002c3f80 items=0 ppid=2370 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:02.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530636564323535333636313137303737636465366564336530363936 Jul 2 08:58:02.425000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.425000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.425000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.425000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.425000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.425000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.425000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.425000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.425000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.425000 audit: BPF prog-id=117 op=LOAD Jul 2 08:58:02.425000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002c3fc8 items=0 ppid=2370 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:02.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530636564323535333636313137303737636465366564336530363936 Jul 2 08:58:02.426000 audit: BPF prog-id=117 op=UNLOAD Jul 2 08:58:02.426000 audit: BPF prog-id=116 op=UNLOAD Jul 2 08:58:02.426000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.426000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.426000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.426000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.426000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.426000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.426000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.426000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.426000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.426000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.426000 audit: BPF prog-id=118 op=LOAD Jul 2 08:58:02.426000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003b63d8 items=0 ppid=2370 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:02.426000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530636564323535333636313137303737636465366564336530363936 Jul 2 08:58:02.449744 kubelet[2009]: E0702 08:58:02.449710 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.449928 kubelet[2009]: W0702 08:58:02.449914 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.450035 kubelet[2009]: E0702 08:58:02.450023 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.484949 env[1136]: time="2024-07-02T08:58:02.484878002Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-77c74b8dbb-xqxsd,Uid:99562cc8-3281-40de-94ae-0a5cee0b60a2,Namespace:calico-system,Attempt:0,} returns sandbox id \"e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de\"" Jul 2 08:58:02.486770 env[1136]: time="2024-07-02T08:58:02.486741890Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\"" Jul 2 08:58:02.499849 kubelet[2009]: E0702 08:58:02.499826 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.500098 kubelet[2009]: W0702 08:58:02.500081 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.500197 kubelet[2009]: E0702 08:58:02.500185 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.500310 kubelet[2009]: I0702 08:58:02.500299 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/6f72bbc2-6c33-4033-bc07-2e6f5f55f594-registration-dir\") pod \"csi-node-driver-jqbj5\" (UID: \"6f72bbc2-6c33-4033-bc07-2e6f5f55f594\") " pod="calico-system/csi-node-driver-jqbj5" Jul 2 08:58:02.500624 kubelet[2009]: E0702 08:58:02.500610 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.500803 kubelet[2009]: W0702 08:58:02.500788 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.500915 kubelet[2009]: E0702 08:58:02.500902 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.501020 kubelet[2009]: I0702 08:58:02.501008 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/6f72bbc2-6c33-4033-bc07-2e6f5f55f594-varrun\") pod \"csi-node-driver-jqbj5\" (UID: \"6f72bbc2-6c33-4033-bc07-2e6f5f55f594\") " pod="calico-system/csi-node-driver-jqbj5" Jul 2 08:58:02.501378 kubelet[2009]: E0702 08:58:02.501365 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.501463 kubelet[2009]: W0702 08:58:02.501450 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.501548 kubelet[2009]: E0702 08:58:02.501537 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.501735 kubelet[2009]: I0702 08:58:02.501724 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/6f72bbc2-6c33-4033-bc07-2e6f5f55f594-socket-dir\") pod \"csi-node-driver-jqbj5\" (UID: \"6f72bbc2-6c33-4033-bc07-2e6f5f55f594\") " pod="calico-system/csi-node-driver-jqbj5" Jul 2 08:58:02.501929 kubelet[2009]: E0702 08:58:02.501866 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.502010 kubelet[2009]: W0702 08:58:02.501998 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.502119 kubelet[2009]: E0702 08:58:02.502107 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.502453 kubelet[2009]: E0702 08:58:02.502418 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.502515 kubelet[2009]: W0702 08:58:02.502461 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.502515 kubelet[2009]: E0702 08:58:02.502496 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.502745 kubelet[2009]: E0702 08:58:02.502728 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.502745 kubelet[2009]: W0702 08:58:02.502742 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.502855 kubelet[2009]: E0702 08:58:02.502765 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.502995 kubelet[2009]: E0702 08:58:02.502926 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.502995 kubelet[2009]: W0702 08:58:02.502943 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.502995 kubelet[2009]: E0702 08:58:02.502969 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.503107 kubelet[2009]: I0702 08:58:02.503018 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gqb2x\" (UniqueName: \"kubernetes.io/projected/6f72bbc2-6c33-4033-bc07-2e6f5f55f594-kube-api-access-gqb2x\") pod \"csi-node-driver-jqbj5\" (UID: \"6f72bbc2-6c33-4033-bc07-2e6f5f55f594\") " pod="calico-system/csi-node-driver-jqbj5" Jul 2 08:58:02.503247 kubelet[2009]: E0702 08:58:02.503177 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.503247 kubelet[2009]: W0702 08:58:02.503194 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.503247 kubelet[2009]: E0702 08:58:02.503208 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.503406 kubelet[2009]: E0702 08:58:02.503385 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.503406 kubelet[2009]: W0702 08:58:02.503401 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.503509 kubelet[2009]: E0702 08:58:02.503416 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.503615 kubelet[2009]: E0702 08:58:02.503562 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.503615 kubelet[2009]: W0702 08:58:02.503576 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.503707 kubelet[2009]: E0702 08:58:02.503631 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.503707 kubelet[2009]: I0702 08:58:02.503657 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/6f72bbc2-6c33-4033-bc07-2e6f5f55f594-kubelet-dir\") pod \"csi-node-driver-jqbj5\" (UID: \"6f72bbc2-6c33-4033-bc07-2e6f5f55f594\") " pod="calico-system/csi-node-driver-jqbj5" Jul 2 08:58:02.504174 kubelet[2009]: E0702 08:58:02.503809 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.504174 kubelet[2009]: W0702 08:58:02.503823 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.504174 kubelet[2009]: E0702 08:58:02.503840 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.504174 kubelet[2009]: E0702 08:58:02.504049 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.504174 kubelet[2009]: W0702 08:58:02.504063 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.504174 kubelet[2009]: E0702 08:58:02.504082 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.504525 kubelet[2009]: E0702 08:58:02.504506 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.504525 kubelet[2009]: W0702 08:58:02.504521 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.504671 kubelet[2009]: E0702 08:58:02.504536 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.504773 kubelet[2009]: E0702 08:58:02.504756 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.504773 kubelet[2009]: W0702 08:58:02.504769 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.504867 kubelet[2009]: E0702 08:58:02.504783 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.505029 kubelet[2009]: E0702 08:58:02.505013 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.505029 kubelet[2009]: W0702 08:58:02.505026 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.505121 kubelet[2009]: E0702 08:58:02.505040 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.605079 kubelet[2009]: E0702 08:58:02.605041 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.605352 kubelet[2009]: W0702 08:58:02.605319 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.605566 kubelet[2009]: E0702 08:58:02.605540 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.606355 kubelet[2009]: E0702 08:58:02.606328 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.606578 kubelet[2009]: W0702 08:58:02.606550 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.606839 kubelet[2009]: E0702 08:58:02.606784 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.607750 kubelet[2009]: E0702 08:58:02.607723 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.608093 kubelet[2009]: W0702 08:58:02.607995 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.608333 kubelet[2009]: E0702 08:58:02.608279 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.608946 kubelet[2009]: E0702 08:58:02.608919 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.609154 kubelet[2009]: W0702 08:58:02.609126 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.609399 kubelet[2009]: E0702 08:58:02.609351 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.609957 kubelet[2009]: E0702 08:58:02.609932 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.610161 kubelet[2009]: W0702 08:58:02.610133 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.610381 kubelet[2009]: E0702 08:58:02.610357 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.611002 kubelet[2009]: E0702 08:58:02.610976 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.611214 kubelet[2009]: W0702 08:58:02.611185 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.611854 kubelet[2009]: E0702 08:58:02.611828 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.612177 kubelet[2009]: W0702 08:58:02.612146 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.612692 kubelet[2009]: E0702 08:58:02.612664 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.613012 kubelet[2009]: E0702 08:58:02.612955 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.613304 kubelet[2009]: E0702 08:58:02.613230 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.613526 kubelet[2009]: W0702 08:58:02.613497 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.613884 kubelet[2009]: E0702 08:58:02.613858 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.614476 kubelet[2009]: E0702 08:58:02.614451 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.614714 kubelet[2009]: W0702 08:58:02.614686 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.614979 kubelet[2009]: E0702 08:58:02.614954 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.615436 kubelet[2009]: E0702 08:58:02.615412 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.615670 kubelet[2009]: W0702 08:58:02.615640 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.616123 kubelet[2009]: E0702 08:58:02.616094 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.616547 kubelet[2009]: E0702 08:58:02.616523 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.616828 kubelet[2009]: W0702 08:58:02.616800 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.617169 kubelet[2009]: E0702 08:58:02.617144 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.617639 kubelet[2009]: E0702 08:58:02.617565 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.617849 kubelet[2009]: W0702 08:58:02.617793 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.618495 kubelet[2009]: E0702 08:58:02.618469 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.618900 kubelet[2009]: E0702 08:58:02.618877 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.619068 kubelet[2009]: W0702 08:58:02.619043 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.619464 kubelet[2009]: E0702 08:58:02.619417 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.619765 kubelet[2009]: E0702 08:58:02.619742 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.620027 kubelet[2009]: W0702 08:58:02.619982 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.620404 kubelet[2009]: E0702 08:58:02.620379 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.620887 kubelet[2009]: E0702 08:58:02.620863 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.621127 kubelet[2009]: W0702 08:58:02.621100 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.621512 kubelet[2009]: E0702 08:58:02.621487 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.626287 kubelet[2009]: E0702 08:58:02.626141 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.626554 kubelet[2009]: W0702 08:58:02.626522 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.632528 kubelet[2009]: E0702 08:58:02.632495 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.639752 kubelet[2009]: E0702 08:58:02.639714 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.639752 kubelet[2009]: W0702 08:58:02.639742 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.640244 kubelet[2009]: E0702 08:58:02.639889 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.641663 kubelet[2009]: E0702 08:58:02.641635 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.641663 kubelet[2009]: W0702 08:58:02.641649 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.641902 kubelet[2009]: E0702 08:58:02.641746 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.643671 kubelet[2009]: E0702 08:58:02.643636 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.643671 kubelet[2009]: W0702 08:58:02.643650 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.643943 kubelet[2009]: E0702 08:58:02.643736 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.645059 kubelet[2009]: E0702 08:58:02.645028 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.645059 kubelet[2009]: W0702 08:58:02.645045 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.645286 kubelet[2009]: E0702 08:58:02.645148 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.645696 kubelet[2009]: E0702 08:58:02.645661 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.645696 kubelet[2009]: W0702 08:58:02.645675 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.645961 kubelet[2009]: E0702 08:58:02.645786 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.647010 kubelet[2009]: E0702 08:58:02.646976 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.647010 kubelet[2009]: W0702 08:58:02.646993 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.647216 kubelet[2009]: E0702 08:58:02.647171 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.647216 kubelet[2009]: W0702 08:58:02.647180 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.647438 kubelet[2009]: E0702 08:58:02.647403 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.647680 kubelet[2009]: E0702 08:58:02.647653 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.649701 kubelet[2009]: E0702 08:58:02.649640 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.649701 kubelet[2009]: W0702 08:58:02.649668 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.649701 kubelet[2009]: E0702 08:58:02.649688 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.650293 kubelet[2009]: E0702 08:58:02.650261 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.650293 kubelet[2009]: W0702 08:58:02.650278 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.650293 kubelet[2009]: E0702 08:58:02.650292 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.653702 kubelet[2009]: E0702 08:58:02.653671 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:02.653895 kubelet[2009]: W0702 08:58:02.653866 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:02.654049 kubelet[2009]: E0702 08:58:02.654026 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:02.742448 env[1136]: time="2024-07-02T08:58:02.742310177Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-5nwb2,Uid:7b22d5ac-d3fa-4e2c-a07d-160a5b754c83,Namespace:calico-system,Attempt:0,}" Jul 2 08:58:02.794660 env[1136]: time="2024-07-02T08:58:02.793336250Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:58:02.794660 env[1136]: time="2024-07-02T08:58:02.793416400Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:58:02.794660 env[1136]: time="2024-07-02T08:58:02.793446817Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:58:02.794660 env[1136]: time="2024-07-02T08:58:02.793598372Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b pid=2463 runtime=io.containerd.runc.v2 Jul 2 08:58:02.827007 systemd[1]: Started cri-containerd-93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b.scope. Jul 2 08:58:02.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.847000 audit: BPF prog-id=119 op=LOAD Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2463 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:02.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933656235653638343132343031623261393861656436396362386261 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2463 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:02.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933656235653638343132343031623261393861656436396362386261 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit: BPF prog-id=120 op=LOAD Jul 2 08:58:02.850000 audit[2474]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000efff0 items=0 ppid=2463 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:02.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933656235653638343132343031623261393861656436396362386261 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit: BPF prog-id=121 op=LOAD Jul 2 08:58:02.850000 audit[2474]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000354038 items=0 ppid=2463 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:02.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933656235653638343132343031623261393861656436396362386261 Jul 2 08:58:02.850000 audit: BPF prog-id=121 op=UNLOAD Jul 2 08:58:02.850000 audit: BPF prog-id=120 op=UNLOAD Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:02.850000 audit: BPF prog-id=122 op=LOAD Jul 2 08:58:02.850000 audit[2474]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000354448 items=0 ppid=2463 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:02.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933656235653638343132343031623261393861656436396362386261 Jul 2 08:58:02.861000 audit[2491]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2491 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:02.861000 audit[2491]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffe30a4e4b0 a2=0 a3=7ffe30a4e49c items=0 ppid=2142 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:02.861000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:02.862000 audit[2491]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2491 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:02.862000 audit[2491]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe30a4e4b0 a2=0 a3=0 items=0 ppid=2142 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:02.862000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:02.876669 env[1136]: time="2024-07-02T08:58:02.876541940Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-5nwb2,Uid:7b22d5ac-d3fa-4e2c-a07d-160a5b754c83,Namespace:calico-system,Attempt:0,} returns sandbox id \"93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b\"" Jul 2 08:58:03.207682 systemd[1]: run-containerd-runc-k8s.io-e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de-runc.VxWlXQ.mount: Deactivated successfully. Jul 2 08:58:03.891636 kernel: kauditd_printk_skb: 179 callbacks suppressed Jul 2 08:58:03.891814 kernel: audit: type=1325 audit(1719910683.885:969): table=filter:95 family=2 entries=16 op=nft_register_rule pid=2501 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:03.891849 kernel: audit: type=1300 audit(1719910683.885:969): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffe40f95260 a2=0 a3=7ffe40f9524c items=0 ppid=2142 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:03.885000 audit[2501]: NETFILTER_CFG table=filter:95 family=2 entries=16 op=nft_register_rule pid=2501 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:03.885000 audit[2501]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffe40f95260 a2=0 a3=7ffe40f9524c items=0 ppid=2142 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:03.885000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:03.900621 kernel: audit: type=1327 audit(1719910683.885:969): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:03.885000 audit[2501]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2501 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:03.885000 audit[2501]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe40f95260 a2=0 a3=0 items=0 ppid=2142 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:03.911615 kernel: audit: type=1325 audit(1719910683.885:970): table=nat:96 family=2 entries=12 op=nft_register_rule pid=2501 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:03.911720 kernel: audit: type=1300 audit(1719910683.885:970): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe40f95260 a2=0 a3=0 items=0 ppid=2142 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:03.885000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:03.914983 kernel: audit: type=1327 audit(1719910683.885:970): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:04.680624 kubelet[2009]: E0702 08:58:04.680572 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jqbj5" podUID="6f72bbc2-6c33-4033-bc07-2e6f5f55f594" Jul 2 08:58:06.039906 env[1136]: time="2024-07-02T08:58:06.039835763Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:06.041982 env[1136]: time="2024-07-02T08:58:06.041959920Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9372c0f51b54c589e5a16013ed3049b2a052dd6903d72603849fab2c4216fbc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:06.043718 env[1136]: time="2024-07-02T08:58:06.043697099Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:06.045543 env[1136]: time="2024-07-02T08:58:06.045522595Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:eff1501af12b7e27e2ef8f4e55d03d837bcb017aa5663e22e519059c452d51ed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:06.046118 env[1136]: time="2024-07-02T08:58:06.046094442Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\" returns image reference \"sha256:a9372c0f51b54c589e5a16013ed3049b2a052dd6903d72603849fab2c4216fbc\"" Jul 2 08:58:06.047239 env[1136]: time="2024-07-02T08:58:06.047213107Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\"" Jul 2 08:58:06.063944 env[1136]: time="2024-07-02T08:58:06.063874885Z" level=info msg="CreateContainer within sandbox \"e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 2 08:58:06.093708 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2577102600.mount: Deactivated successfully. Jul 2 08:58:06.107107 env[1136]: time="2024-07-02T08:58:06.107035452Z" level=info msg="CreateContainer within sandbox \"e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\"" Jul 2 08:58:06.107947 env[1136]: time="2024-07-02T08:58:06.107927240Z" level=info msg="StartContainer for \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\"" Jul 2 08:58:06.143929 systemd[1]: Started cri-containerd-45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b.scope. Jul 2 08:58:06.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.168299 kernel: audit: type=1400 audit(1719910686.160:971): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.168381 kernel: audit: type=1400 audit(1719910686.160:972): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.168419 kernel: audit: type=1400 audit(1719910686.160:973): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.180614 kernel: audit: type=1400 audit(1719910686.160:974): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.168000 audit: BPF prog-id=123 op=LOAD Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2370 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:06.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435616663643939333530656632323634323933373637373936353739 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2370 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:06.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435616663643939333530656632323634323933373637373936353739 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit: BPF prog-id=124 op=LOAD Jul 2 08:58:06.173000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000218f90 items=0 ppid=2370 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:06.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435616663643939333530656632323634323933373637373936353739 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit: BPF prog-id=125 op=LOAD Jul 2 08:58:06.173000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000218fd8 items=0 ppid=2370 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:06.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435616663643939333530656632323634323933373637373936353739 Jul 2 08:58:06.173000 audit: BPF prog-id=125 op=UNLOAD Jul 2 08:58:06.173000 audit: BPF prog-id=124 op=UNLOAD Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:06.173000 audit: BPF prog-id=126 op=LOAD Jul 2 08:58:06.173000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002193e8 items=0 ppid=2370 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:06.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435616663643939333530656632323634323933373637373936353739 Jul 2 08:58:06.237964 env[1136]: time="2024-07-02T08:58:06.237892373Z" level=info msg="StartContainer for \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\" returns successfully" Jul 2 08:58:06.676744 kubelet[2009]: E0702 08:58:06.676055 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jqbj5" podUID="6f72bbc2-6c33-4033-bc07-2e6f5f55f594" Jul 2 08:58:06.864008 env[1136]: time="2024-07-02T08:58:06.863973122Z" level=info msg="StopContainer for \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\" with timeout 300 (s)" Jul 2 08:58:06.864629 env[1136]: time="2024-07-02T08:58:06.864607095Z" level=info msg="Stop container \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\" with signal terminated" Jul 2 08:58:06.875000 audit: BPF prog-id=123 op=UNLOAD Jul 2 08:58:06.876210 systemd[1]: cri-containerd-45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b.scope: Deactivated successfully. Jul 2 08:58:06.878000 audit: BPF prog-id=126 op=UNLOAD Jul 2 08:58:07.052693 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b-rootfs.mount: Deactivated successfully. Jul 2 08:58:07.431007 env[1136]: time="2024-07-02T08:58:07.430789729Z" level=info msg="shim disconnected" id=45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b Jul 2 08:58:07.431884 env[1136]: time="2024-07-02T08:58:07.431835686Z" level=warning msg="cleaning up after shim disconnected" id=45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b namespace=k8s.io Jul 2 08:58:07.432087 env[1136]: time="2024-07-02T08:58:07.432049730Z" level=info msg="cleaning up dead shim" Jul 2 08:58:07.459949 env[1136]: time="2024-07-02T08:58:07.459821630Z" level=warning msg="cleanup warnings time=\"2024-07-02T08:58:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2561 runtime=io.containerd.runc.v2\ntime=\"2024-07-02T08:58:07Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Jul 2 08:58:07.465648 env[1136]: time="2024-07-02T08:58:07.465525314Z" level=info msg="StopContainer for \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\" returns successfully" Jul 2 08:58:07.466986 env[1136]: time="2024-07-02T08:58:07.466929977Z" level=info msg="StopPodSandbox for \"e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de\"" Jul 2 08:58:07.467346 env[1136]: time="2024-07-02T08:58:07.467295294Z" level=info msg="Container to stop \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 2 08:58:07.475391 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de-shm.mount: Deactivated successfully. Jul 2 08:58:07.493000 audit: BPF prog-id=115 op=UNLOAD Jul 2 08:58:07.493965 systemd[1]: cri-containerd-e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de.scope: Deactivated successfully. Jul 2 08:58:07.496000 audit: BPF prog-id=118 op=UNLOAD Jul 2 08:58:07.524162 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de-rootfs.mount: Deactivated successfully. Jul 2 08:58:07.533049 env[1136]: time="2024-07-02T08:58:07.532976555Z" level=info msg="shim disconnected" id=e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de Jul 2 08:58:07.533049 env[1136]: time="2024-07-02T08:58:07.533039222Z" level=warning msg="cleaning up after shim disconnected" id=e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de namespace=k8s.io Jul 2 08:58:07.533049 env[1136]: time="2024-07-02T08:58:07.533053459Z" level=info msg="cleaning up dead shim" Jul 2 08:58:07.548151 env[1136]: time="2024-07-02T08:58:07.548109001Z" level=warning msg="cleanup warnings time=\"2024-07-02T08:58:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2591 runtime=io.containerd.runc.v2\n" Jul 2 08:58:07.548830 env[1136]: time="2024-07-02T08:58:07.548803839Z" level=info msg="TearDown network for sandbox \"e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de\" successfully" Jul 2 08:58:07.548930 env[1136]: time="2024-07-02T08:58:07.548909057Z" level=info msg="StopPodSandbox for \"e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de\" returns successfully" Jul 2 08:58:07.580616 kubelet[2009]: I0702 08:58:07.580543 2009 topology_manager.go:215] "Topology Admit Handler" podUID="9592ff32-e3f7-4500-ac16-cc13689fd45a" podNamespace="calico-system" podName="calico-typha-577d797687-4lwkx" Jul 2 08:58:07.580812 kubelet[2009]: E0702 08:58:07.580650 2009 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="99562cc8-3281-40de-94ae-0a5cee0b60a2" containerName="calico-typha" Jul 2 08:58:07.580812 kubelet[2009]: I0702 08:58:07.580685 2009 memory_manager.go:354] "RemoveStaleState removing state" podUID="99562cc8-3281-40de-94ae-0a5cee0b60a2" containerName="calico-typha" Jul 2 08:58:07.591504 systemd[1]: Created slice kubepods-besteffort-pod9592ff32_e3f7_4500_ac16_cc13689fd45a.slice. Jul 2 08:58:07.603000 audit[2606]: NETFILTER_CFG table=filter:97 family=2 entries=16 op=nft_register_rule pid=2606 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:07.603000 audit[2606]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7fff790b9450 a2=0 a3=7fff790b943c items=0 ppid=2142 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:07.603000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:07.605000 audit[2606]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2606 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:07.605000 audit[2606]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff790b9450 a2=0 a3=0 items=0 ppid=2142 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:07.605000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:07.624000 audit[2608]: NETFILTER_CFG table=filter:99 family=2 entries=16 op=nft_register_rule pid=2608 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:07.624000 audit[2608]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7fff1dc2cbb0 a2=0 a3=7fff1dc2cb9c items=0 ppid=2142 pid=2608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:07.624000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:07.624000 audit[2608]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=2608 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:07.624000 audit[2608]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff1dc2cbb0 a2=0 a3=0 items=0 ppid=2142 pid=2608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:07.624000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:07.649813 kubelet[2009]: E0702 08:58:07.649789 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.649990 kubelet[2009]: W0702 08:58:07.649974 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.650163 kubelet[2009]: E0702 08:58:07.650151 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.650426 kubelet[2009]: E0702 08:58:07.650415 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.650517 kubelet[2009]: W0702 08:58:07.650505 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.650623 kubelet[2009]: E0702 08:58:07.650610 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.650922 kubelet[2009]: E0702 08:58:07.650911 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.651020 kubelet[2009]: W0702 08:58:07.651008 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.651117 kubelet[2009]: E0702 08:58:07.651106 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.652726 kubelet[2009]: E0702 08:58:07.652711 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.652843 kubelet[2009]: W0702 08:58:07.652830 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.652938 kubelet[2009]: E0702 08:58:07.652927 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.653437 kubelet[2009]: E0702 08:58:07.653425 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.653532 kubelet[2009]: W0702 08:58:07.653520 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.653868 kubelet[2009]: E0702 08:58:07.653713 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.654485 kubelet[2009]: E0702 08:58:07.654451 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.654545 kubelet[2009]: W0702 08:58:07.654512 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.654545 kubelet[2009]: E0702 08:58:07.654540 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.654897 kubelet[2009]: E0702 08:58:07.654869 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.654897 kubelet[2009]: W0702 08:58:07.654894 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.654998 kubelet[2009]: E0702 08:58:07.654920 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.655301 kubelet[2009]: E0702 08:58:07.655248 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.655301 kubelet[2009]: W0702 08:58:07.655273 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.655404 kubelet[2009]: E0702 08:58:07.655334 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.655741 kubelet[2009]: E0702 08:58:07.655711 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.655741 kubelet[2009]: W0702 08:58:07.655736 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.655841 kubelet[2009]: E0702 08:58:07.655757 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.656081 kubelet[2009]: E0702 08:58:07.656056 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.656153 kubelet[2009]: W0702 08:58:07.656083 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.656153 kubelet[2009]: E0702 08:58:07.656106 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.656383 kubelet[2009]: E0702 08:58:07.656359 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.656383 kubelet[2009]: W0702 08:58:07.656383 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.656515 kubelet[2009]: E0702 08:58:07.656404 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.656691 kubelet[2009]: E0702 08:58:07.656657 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.656691 kubelet[2009]: W0702 08:58:07.656679 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.656780 kubelet[2009]: E0702 08:58:07.656700 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.657081 kubelet[2009]: E0702 08:58:07.657060 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.657148 kubelet[2009]: W0702 08:58:07.657084 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.657148 kubelet[2009]: E0702 08:58:07.657106 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.657216 kubelet[2009]: I0702 08:58:07.657154 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/99562cc8-3281-40de-94ae-0a5cee0b60a2-tigera-ca-bundle\") pod \"99562cc8-3281-40de-94ae-0a5cee0b60a2\" (UID: \"99562cc8-3281-40de-94ae-0a5cee0b60a2\") " Jul 2 08:58:07.657677 kubelet[2009]: E0702 08:58:07.657631 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.657677 kubelet[2009]: W0702 08:58:07.657649 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.657677 kubelet[2009]: E0702 08:58:07.657663 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.657793 kubelet[2009]: I0702 08:58:07.657689 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/99562cc8-3281-40de-94ae-0a5cee0b60a2-typha-certs\") pod \"99562cc8-3281-40de-94ae-0a5cee0b60a2\" (UID: \"99562cc8-3281-40de-94ae-0a5cee0b60a2\") " Jul 2 08:58:07.659828 kubelet[2009]: E0702 08:58:07.659796 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.659828 kubelet[2009]: W0702 08:58:07.659819 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.660014 kubelet[2009]: E0702 08:58:07.659841 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.660014 kubelet[2009]: I0702 08:58:07.659876 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-sdtlq\" (UniqueName: \"kubernetes.io/projected/99562cc8-3281-40de-94ae-0a5cee0b60a2-kube-api-access-sdtlq\") pod \"99562cc8-3281-40de-94ae-0a5cee0b60a2\" (UID: \"99562cc8-3281-40de-94ae-0a5cee0b60a2\") " Jul 2 08:58:07.660588 kubelet[2009]: E0702 08:58:07.660540 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.660588 kubelet[2009]: W0702 08:58:07.660561 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.660705 kubelet[2009]: E0702 08:58:07.660577 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.660705 kubelet[2009]: I0702 08:58:07.660680 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/9592ff32-e3f7-4500-ac16-cc13689fd45a-typha-certs\") pod \"calico-typha-577d797687-4lwkx\" (UID: \"9592ff32-e3f7-4500-ac16-cc13689fd45a\") " pod="calico-system/calico-typha-577d797687-4lwkx" Jul 2 08:58:07.662733 kubelet[2009]: E0702 08:58:07.662712 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.662827 kubelet[2009]: W0702 08:58:07.662811 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.662905 kubelet[2009]: E0702 08:58:07.662893 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.663001 kubelet[2009]: I0702 08:58:07.662990 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9592ff32-e3f7-4500-ac16-cc13689fd45a-tigera-ca-bundle\") pod \"calico-typha-577d797687-4lwkx\" (UID: \"9592ff32-e3f7-4500-ac16-cc13689fd45a\") " pod="calico-system/calico-typha-577d797687-4lwkx" Jul 2 08:58:07.664901 kubelet[2009]: E0702 08:58:07.664887 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.665007 kubelet[2009]: W0702 08:58:07.664993 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.665092 kubelet[2009]: E0702 08:58:07.665081 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.665179 kubelet[2009]: I0702 08:58:07.665168 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wht79\" (UniqueName: \"kubernetes.io/projected/9592ff32-e3f7-4500-ac16-cc13689fd45a-kube-api-access-wht79\") pod \"calico-typha-577d797687-4lwkx\" (UID: \"9592ff32-e3f7-4500-ac16-cc13689fd45a\") " pod="calico-system/calico-typha-577d797687-4lwkx" Jul 2 08:58:07.666368 kubelet[2009]: E0702 08:58:07.666353 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.666452 kubelet[2009]: W0702 08:58:07.666439 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.666557 kubelet[2009]: E0702 08:58:07.666546 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.666816 kubelet[2009]: E0702 08:58:07.666804 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.666903 kubelet[2009]: W0702 08:58:07.666888 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.667004 kubelet[2009]: E0702 08:58:07.666978 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.673071 kubelet[2009]: E0702 08:58:07.671675 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.673071 kubelet[2009]: W0702 08:58:07.671699 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.673071 kubelet[2009]: E0702 08:58:07.671725 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.672356 systemd[1]: var-lib-kubelet-pods-99562cc8\x2d3281\x2d40de\x2d94ae\x2d0a5cee0b60a2-volume\x2dsubpaths-tigera\x2dca\x2dbundle-calico\x2dtypha-1.mount: Deactivated successfully. Jul 2 08:58:07.674167 kubelet[2009]: E0702 08:58:07.674150 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.674256 kubelet[2009]: W0702 08:58:07.674242 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.674334 kubelet[2009]: E0702 08:58:07.674322 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.676434 systemd[1]: var-lib-kubelet-pods-99562cc8\x2d3281\x2d40de\x2d94ae\x2d0a5cee0b60a2-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dsdtlq.mount: Deactivated successfully. Jul 2 08:58:07.679103 kubelet[2009]: I0702 08:58:07.679079 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/99562cc8-3281-40de-94ae-0a5cee0b60a2-tigera-ca-bundle" (OuterVolumeSpecName: "tigera-ca-bundle") pod "99562cc8-3281-40de-94ae-0a5cee0b60a2" (UID: "99562cc8-3281-40de-94ae-0a5cee0b60a2"). InnerVolumeSpecName "tigera-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 2 08:58:07.680705 kubelet[2009]: I0702 08:58:07.680683 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/99562cc8-3281-40de-94ae-0a5cee0b60a2-kube-api-access-sdtlq" (OuterVolumeSpecName: "kube-api-access-sdtlq") pod "99562cc8-3281-40de-94ae-0a5cee0b60a2" (UID: "99562cc8-3281-40de-94ae-0a5cee0b60a2"). InnerVolumeSpecName "kube-api-access-sdtlq". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 2 08:58:07.682785 kubelet[2009]: E0702 08:58:07.682709 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.682785 kubelet[2009]: W0702 08:58:07.682735 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.686422 kubelet[2009]: E0702 08:58:07.686403 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.688110 kubelet[2009]: E0702 08:58:07.688095 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.688231 kubelet[2009]: W0702 08:58:07.688217 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.688499 kubelet[2009]: E0702 08:58:07.688460 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.688928 kubelet[2009]: E0702 08:58:07.688915 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.689029 kubelet[2009]: W0702 08:58:07.689016 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.689328 kubelet[2009]: E0702 08:58:07.689316 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.689405 kubelet[2009]: W0702 08:58:07.689393 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.689478 kubelet[2009]: E0702 08:58:07.689467 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.689569 kubelet[2009]: E0702 08:58:07.689558 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.691518 kubelet[2009]: E0702 08:58:07.691503 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.691640 kubelet[2009]: W0702 08:58:07.691627 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.691725 kubelet[2009]: E0702 08:58:07.691715 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.692801 kubelet[2009]: I0702 08:58:07.692777 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/99562cc8-3281-40de-94ae-0a5cee0b60a2-typha-certs" (OuterVolumeSpecName: "typha-certs") pod "99562cc8-3281-40de-94ae-0a5cee0b60a2" (UID: "99562cc8-3281-40de-94ae-0a5cee0b60a2"). InnerVolumeSpecName "typha-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 2 08:58:07.766729 kubelet[2009]: E0702 08:58:07.766689 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.766729 kubelet[2009]: W0702 08:58:07.766721 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.766917 kubelet[2009]: E0702 08:58:07.766761 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.767052 kubelet[2009]: E0702 08:58:07.767030 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.767052 kubelet[2009]: W0702 08:58:07.767046 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.767132 kubelet[2009]: E0702 08:58:07.767061 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.767387 kubelet[2009]: E0702 08:58:07.767367 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.767387 kubelet[2009]: W0702 08:58:07.767382 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.767566 kubelet[2009]: E0702 08:58:07.767404 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.767566 kubelet[2009]: I0702 08:58:07.767452 2009 reconciler_common.go:300] "Volume detached for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/99562cc8-3281-40de-94ae-0a5cee0b60a2-tigera-ca-bundle\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:07.767566 kubelet[2009]: I0702 08:58:07.767475 2009 reconciler_common.go:300] "Volume detached for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/99562cc8-3281-40de-94ae-0a5cee0b60a2-typha-certs\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:07.767566 kubelet[2009]: I0702 08:58:07.767500 2009 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-sdtlq\" (UniqueName: \"kubernetes.io/projected/99562cc8-3281-40de-94ae-0a5cee0b60a2-kube-api-access-sdtlq\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:07.767715 kubelet[2009]: E0702 08:58:07.767703 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.767715 kubelet[2009]: W0702 08:58:07.767713 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.767780 kubelet[2009]: E0702 08:58:07.767727 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.767945 kubelet[2009]: E0702 08:58:07.767928 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.767945 kubelet[2009]: W0702 08:58:07.767941 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.768042 kubelet[2009]: E0702 08:58:07.767961 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.768127 kubelet[2009]: E0702 08:58:07.768107 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.768127 kubelet[2009]: W0702 08:58:07.768122 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.768230 kubelet[2009]: E0702 08:58:07.768142 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.768361 kubelet[2009]: E0702 08:58:07.768340 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.768361 kubelet[2009]: W0702 08:58:07.768355 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.768442 kubelet[2009]: E0702 08:58:07.768368 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.768692 kubelet[2009]: E0702 08:58:07.768673 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.768775 kubelet[2009]: W0702 08:58:07.768760 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.768853 kubelet[2009]: E0702 08:58:07.768841 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.769066 kubelet[2009]: E0702 08:58:07.769055 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.769141 kubelet[2009]: W0702 08:58:07.769129 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.769210 kubelet[2009]: E0702 08:58:07.769200 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.769393 kubelet[2009]: E0702 08:58:07.769382 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.769461 kubelet[2009]: W0702 08:58:07.769450 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.769532 kubelet[2009]: E0702 08:58:07.769522 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.770724 kubelet[2009]: E0702 08:58:07.770712 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.770805 kubelet[2009]: W0702 08:58:07.770793 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.770877 kubelet[2009]: E0702 08:58:07.770867 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.772761 kubelet[2009]: E0702 08:58:07.772725 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.772761 kubelet[2009]: W0702 08:58:07.772754 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.772897 kubelet[2009]: E0702 08:58:07.772786 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.773000 kubelet[2009]: E0702 08:58:07.772983 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.773000 kubelet[2009]: W0702 08:58:07.772997 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.773079 kubelet[2009]: E0702 08:58:07.773014 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.773184 kubelet[2009]: E0702 08:58:07.773167 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.773184 kubelet[2009]: W0702 08:58:07.773180 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.773260 kubelet[2009]: E0702 08:58:07.773194 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.773366 kubelet[2009]: E0702 08:58:07.773345 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.773366 kubelet[2009]: W0702 08:58:07.773363 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.773442 kubelet[2009]: E0702 08:58:07.773382 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.773546 kubelet[2009]: E0702 08:58:07.773529 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.773546 kubelet[2009]: W0702 08:58:07.773542 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.773646 kubelet[2009]: E0702 08:58:07.773555 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.773773 kubelet[2009]: E0702 08:58:07.773754 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.773773 kubelet[2009]: W0702 08:58:07.773767 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.773850 kubelet[2009]: E0702 08:58:07.773781 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.806345 kubelet[2009]: E0702 08:58:07.806298 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:58:07.806692 kubelet[2009]: W0702 08:58:07.806658 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:58:07.806880 kubelet[2009]: E0702 08:58:07.806845 2009 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:58:07.879474 systemd[1]: Removed slice kubepods-besteffort-pod99562cc8_3281_40de_94ae_0a5cee0b60a2.slice. Jul 2 08:58:07.881986 kubelet[2009]: I0702 08:58:07.881933 2009 scope.go:117] "RemoveContainer" containerID="45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b" Jul 2 08:58:07.885908 env[1136]: time="2024-07-02T08:58:07.885835388Z" level=info msg="RemoveContainer for \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\"" Jul 2 08:58:07.895572 env[1136]: time="2024-07-02T08:58:07.895479667Z" level=info msg="RemoveContainer for \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\" returns successfully" Jul 2 08:58:07.897029 env[1136]: time="2024-07-02T08:58:07.896960885Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-577d797687-4lwkx,Uid:9592ff32-e3f7-4500-ac16-cc13689fd45a,Namespace:calico-system,Attempt:0,}" Jul 2 08:58:07.897573 kubelet[2009]: I0702 08:58:07.897511 2009 scope.go:117] "RemoveContainer" containerID="45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b" Jul 2 08:58:07.898302 env[1136]: time="2024-07-02T08:58:07.898000801Z" level=error msg="ContainerStatus for \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\": not found" Jul 2 08:58:07.898648 kubelet[2009]: E0702 08:58:07.898575 2009 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\": not found" containerID="45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b" Jul 2 08:58:07.898798 kubelet[2009]: I0702 08:58:07.898665 2009 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b"} err="failed to get container status \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\": rpc error: code = NotFound desc = an error occurred when try to find container \"45afcd99350ef2264293767796579dee9bb11cf36ca941114aebc0c17eebd84b\": not found" Jul 2 08:58:07.929728 env[1136]: time="2024-07-02T08:58:07.929642845Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:58:07.929728 env[1136]: time="2024-07-02T08:58:07.929723818Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:58:07.930152 env[1136]: time="2024-07-02T08:58:07.929756339Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:58:07.930152 env[1136]: time="2024-07-02T08:58:07.929915138Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bcadc0cc9029dc5826f131ea3977307657892ac8f830a1fb872fd2a37b2e1d08 pid=2666 runtime=io.containerd.runc.v2 Jul 2 08:58:07.955122 systemd[1]: Started cri-containerd-bcadc0cc9029dc5826f131ea3977307657892ac8f830a1fb872fd2a37b2e1d08.scope. Jul 2 08:58:07.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.975000 audit: BPF prog-id=127 op=LOAD Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2666 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:07.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263616463306363393032396463353832366631333165613339373733 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2666 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:07.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263616463306363393032396463353832366631333165613339373733 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit: BPF prog-id=128 op=LOAD Jul 2 08:58:07.976000 audit[2678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001f3ff0 items=0 ppid=2666 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:07.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263616463306363393032396463353832366631333165613339373733 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit: BPF prog-id=129 op=LOAD Jul 2 08:58:07.976000 audit[2678]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003f2038 items=0 ppid=2666 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:07.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263616463306363393032396463353832366631333165613339373733 Jul 2 08:58:07.976000 audit: BPF prog-id=129 op=UNLOAD Jul 2 08:58:07.976000 audit: BPF prog-id=128 op=UNLOAD Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:07.976000 audit: BPF prog-id=130 op=LOAD Jul 2 08:58:07.976000 audit[2678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003f2448 items=0 ppid=2666 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:07.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263616463306363393032396463353832366631333165613339373733 Jul 2 08:58:08.020242 env[1136]: time="2024-07-02T08:58:08.020172251Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-577d797687-4lwkx,Uid:9592ff32-e3f7-4500-ac16-cc13689fd45a,Namespace:calico-system,Attempt:0,} returns sandbox id \"bcadc0cc9029dc5826f131ea3977307657892ac8f830a1fb872fd2a37b2e1d08\"" Jul 2 08:58:08.031924 env[1136]: time="2024-07-02T08:58:08.031867067Z" level=info msg="CreateContainer within sandbox \"bcadc0cc9029dc5826f131ea3977307657892ac8f830a1fb872fd2a37b2e1d08\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 2 08:58:08.070189 systemd[1]: var-lib-kubelet-pods-99562cc8\x2d3281\x2d40de\x2d94ae\x2d0a5cee0b60a2-volumes-kubernetes.io\x7esecret-typha\x2dcerts.mount: Deactivated successfully. Jul 2 08:58:08.071006 env[1136]: time="2024-07-02T08:58:08.070968111Z" level=info msg="CreateContainer within sandbox \"bcadc0cc9029dc5826f131ea3977307657892ac8f830a1fb872fd2a37b2e1d08\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"0991d03d96dd7ef6f4dfec39870adefb3e8baafc25dfc1ab28d241e5eda4f209\"" Jul 2 08:58:08.074146 env[1136]: time="2024-07-02T08:58:08.074108670Z" level=info msg="StartContainer for \"0991d03d96dd7ef6f4dfec39870adefb3e8baafc25dfc1ab28d241e5eda4f209\"" Jul 2 08:58:08.097572 systemd[1]: Started cri-containerd-0991d03d96dd7ef6f4dfec39870adefb3e8baafc25dfc1ab28d241e5eda4f209.scope. Jul 2 08:58:08.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit: BPF prog-id=131 op=LOAD Jul 2 08:58:08.128000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2666 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:08.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393164303364393664643765663666346466656333393837306164 Jul 2 08:58:08.128000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2666 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:08.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393164303364393664643765663666346466656333393837306164 Jul 2 08:58:08.128000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.128000 audit: BPF prog-id=132 op=LOAD Jul 2 08:58:08.128000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002d7d00 items=0 ppid=2666 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:08.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393164303364393664643765663666346466656333393837306164 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit: BPF prog-id=133 op=LOAD Jul 2 08:58:08.129000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002d7d48 items=0 ppid=2666 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:08.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393164303364393664643765663666346466656333393837306164 Jul 2 08:58:08.129000 audit: BPF prog-id=133 op=UNLOAD Jul 2 08:58:08.129000 audit: BPF prog-id=132 op=UNLOAD Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.129000 audit: BPF prog-id=134 op=LOAD Jul 2 08:58:08.129000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00034e158 items=0 ppid=2666 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:08.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393164303364393664643765663666346466656333393837306164 Jul 2 08:58:08.205191 env[1136]: time="2024-07-02T08:58:08.205096703Z" level=info msg="StartContainer for \"0991d03d96dd7ef6f4dfec39870adefb3e8baafc25dfc1ab28d241e5eda4f209\" returns successfully" Jul 2 08:58:08.675161 kubelet[2009]: E0702 08:58:08.675127 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jqbj5" podUID="6f72bbc2-6c33-4033-bc07-2e6f5f55f594" Jul 2 08:58:08.692862 env[1136]: time="2024-07-02T08:58:08.692810294Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:08.695731 env[1136]: time="2024-07-02T08:58:08.695703047Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:587b28ecfc62e2a60919e6a39f9b25be37c77da99d8c84252716fa3a49a171b9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:08.698251 env[1136]: time="2024-07-02T08:58:08.698225483Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:08.700682 env[1136]: time="2024-07-02T08:58:08.700640357Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:e57c9db86f1cee1ae6f41257eed1ee2f363783177809217a2045502a09cf7cee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:08.701358 env[1136]: time="2024-07-02T08:58:08.701323903Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\" returns image reference \"sha256:587b28ecfc62e2a60919e6a39f9b25be37c77da99d8c84252716fa3a49a171b9\"" Jul 2 08:58:08.703753 env[1136]: time="2024-07-02T08:58:08.703715624Z" level=info msg="CreateContainer within sandbox \"93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 2 08:58:08.727399 env[1136]: time="2024-07-02T08:58:08.727357389Z" level=info msg="CreateContainer within sandbox \"93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\"" Jul 2 08:58:08.728181 env[1136]: time="2024-07-02T08:58:08.728157885Z" level=info msg="StartContainer for \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\"" Jul 2 08:58:08.756890 systemd[1]: Started cri-containerd-8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be.scope. Jul 2 08:58:08.792000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.792000 audit[2748]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f0c103e2cc8 items=0 ppid=2463 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:08.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343830396235643434633933356133393134663936373635313665 Jul 2 08:58:08.792000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.792000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.792000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.792000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.792000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.792000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.792000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.792000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.792000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.792000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.792000 audit: BPF prog-id=135 op=LOAD Jul 2 08:58:08.792000 audit[2748]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c00027bc58 items=0 ppid=2463 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:08.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343830396235643434633933356133393134663936373635313665 Jul 2 08:58:08.793000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.793000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.793000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.793000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.793000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.793000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.793000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.793000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.793000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.793000 audit: BPF prog-id=136 op=LOAD Jul 2 08:58:08.793000 audit[2748]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c00027bca8 items=0 ppid=2463 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:08.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343830396235643434633933356133393134663936373635313665 Jul 2 08:58:08.794000 audit: BPF prog-id=136 op=UNLOAD Jul 2 08:58:08.794000 audit: BPF prog-id=135 op=UNLOAD Jul 2 08:58:08.794000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.794000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.794000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.794000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.794000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.794000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.794000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.794000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.794000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.794000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:08.794000 audit: BPF prog-id=137 op=LOAD Jul 2 08:58:08.794000 audit[2748]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c00027bd38 items=0 ppid=2463 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:08.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343830396235643434633933356133393134663936373635313665 Jul 2 08:58:08.834148 env[1136]: time="2024-07-02T08:58:08.834084842Z" level=info msg="StartContainer for \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\" returns successfully" Jul 2 08:58:08.844574 systemd[1]: cri-containerd-8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be.scope: Deactivated successfully. Jul 2 08:58:08.849000 audit: BPF prog-id=137 op=UNLOAD Jul 2 08:58:08.883326 env[1136]: time="2024-07-02T08:58:08.883274128Z" level=info msg="StopContainer for \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\" with timeout 5 (s)" Jul 2 08:58:08.933906 env[1136]: time="2024-07-02T08:58:08.933753061Z" level=info msg="Stop container \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\" with signal terminated" Jul 2 08:58:08.935801 env[1136]: time="2024-07-02T08:58:08.935748035Z" level=info msg="shim disconnected" id=8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be Jul 2 08:58:08.935801 env[1136]: time="2024-07-02T08:58:08.935795614Z" level=warning msg="cleaning up after shim disconnected" id=8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be namespace=k8s.io Jul 2 08:58:08.935972 env[1136]: time="2024-07-02T08:58:08.935806716Z" level=info msg="cleaning up dead shim" Jul 2 08:58:08.945539 env[1136]: time="2024-07-02T08:58:08.945499093Z" level=warning msg="cleanup warnings time=\"2024-07-02T08:58:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2788 runtime=io.containerd.runc.v2\n" Jul 2 08:58:08.953609 kubelet[2009]: I0702 08:58:08.953430 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-577d797687-4lwkx" podStartSLOduration=5.953384311 podStartE2EDuration="5.953384311s" podCreationTimestamp="2024-07-02 08:58:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 08:58:08.930553901 +0000 UTC m=+25.483986338" watchObservedRunningTime="2024-07-02 08:58:08.953384311 +0000 UTC m=+25.506816748" Jul 2 08:58:08.954820 env[1136]: time="2024-07-02T08:58:08.954771500Z" level=info msg="StopContainer for \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\" returns successfully" Jul 2 08:58:08.955216 env[1136]: time="2024-07-02T08:58:08.955176603Z" level=info msg="StopPodSandbox for \"93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b\"" Jul 2 08:58:08.955277 env[1136]: time="2024-07-02T08:58:08.955235043Z" level=info msg="Container to stop \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 2 08:58:08.963738 systemd[1]: cri-containerd-93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b.scope: Deactivated successfully. Jul 2 08:58:08.967387 kernel: kauditd_printk_skb: 227 callbacks suppressed Jul 2 08:58:08.967498 kernel: audit: type=1334 audit(1719910688.963:1040): prog-id=119 op=UNLOAD Jul 2 08:58:08.963000 audit: BPF prog-id=119 op=UNLOAD Jul 2 08:58:08.968000 audit: BPF prog-id=122 op=UNLOAD Jul 2 08:58:08.971795 kernel: audit: type=1334 audit(1719910688.968:1041): prog-id=122 op=UNLOAD Jul 2 08:58:09.006134 env[1136]: time="2024-07-02T08:58:09.006051410Z" level=info msg="shim disconnected" id=93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b Jul 2 08:58:09.006134 env[1136]: time="2024-07-02T08:58:09.006110210Z" level=warning msg="cleaning up after shim disconnected" id=93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b namespace=k8s.io Jul 2 08:58:09.006134 env[1136]: time="2024-07-02T08:58:09.006122073Z" level=info msg="cleaning up dead shim" Jul 2 08:58:09.017671 env[1136]: time="2024-07-02T08:58:09.017575252Z" level=warning msg="cleanup warnings time=\"2024-07-02T08:58:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2822 runtime=io.containerd.runc.v2\n" Jul 2 08:58:09.018322 env[1136]: time="2024-07-02T08:58:09.018292922Z" level=info msg="TearDown network for sandbox \"93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b\" successfully" Jul 2 08:58:09.018422 env[1136]: time="2024-07-02T08:58:09.018402388Z" level=info msg="StopPodSandbox for \"93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b\" returns successfully" Jul 2 08:58:09.054942 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be-rootfs.mount: Deactivated successfully. Jul 2 08:58:09.055066 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b-rootfs.mount: Deactivated successfully. Jul 2 08:58:09.055154 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b-shm.mount: Deactivated successfully. Jul 2 08:58:09.074776 kubelet[2009]: I0702 08:58:09.074748 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-node-certs\") pod \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " Jul 2 08:58:09.075008 kubelet[2009]: I0702 08:58:09.074995 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-policysync\") pod \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " Jul 2 08:58:09.075138 kubelet[2009]: I0702 08:58:09.075125 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-var-lib-calico\") pod \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " Jul 2 08:58:09.075264 kubelet[2009]: I0702 08:58:09.075250 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-var-run-calico\") pod \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " Jul 2 08:58:09.075403 kubelet[2009]: I0702 08:58:09.075391 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-cni-bin-dir\") pod \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " Jul 2 08:58:09.075570 kubelet[2009]: I0702 08:58:09.075532 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-cni-net-dir\") pod \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " Jul 2 08:58:09.075727 kubelet[2009]: I0702 08:58:09.075714 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-tigera-ca-bundle\") pod \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " Jul 2 08:58:09.075860 kubelet[2009]: I0702 08:58:09.075847 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-74lb2\" (UniqueName: \"kubernetes.io/projected/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-kube-api-access-74lb2\") pod \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " Jul 2 08:58:09.075998 kubelet[2009]: I0702 08:58:09.075986 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-xtables-lock\") pod \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " Jul 2 08:58:09.076108 kubelet[2009]: I0702 08:58:09.076096 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-cni-log-dir\") pod \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " Jul 2 08:58:09.076222 kubelet[2009]: I0702 08:58:09.076209 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-lib-modules\") pod \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " Jul 2 08:58:09.076319 kubelet[2009]: I0702 08:58:09.076307 2009 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-flexvol-driver-host\") pod \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\" (UID: \"7b22d5ac-d3fa-4e2c-a07d-160a5b754c83\") " Jul 2 08:58:09.076519 kubelet[2009]: I0702 08:58:09.076499 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-flexvol-driver-host" (OuterVolumeSpecName: "flexvol-driver-host") pod "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" (UID: "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83"). InnerVolumeSpecName "flexvol-driver-host". PluginName "kubernetes.io/host-path", VolumeGidValue "" Jul 2 08:58:09.076757 kubelet[2009]: I0702 08:58:09.076708 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-cni-net-dir" (OuterVolumeSpecName: "cni-net-dir") pod "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" (UID: "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83"). InnerVolumeSpecName "cni-net-dir". PluginName "kubernetes.io/host-path", VolumeGidValue "" Jul 2 08:58:09.077412 kubelet[2009]: I0702 08:58:09.077380 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-tigera-ca-bundle" (OuterVolumeSpecName: "tigera-ca-bundle") pod "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" (UID: "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83"). InnerVolumeSpecName "tigera-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 2 08:58:09.082199 systemd[1]: var-lib-kubelet-pods-7b22d5ac\x2dd3fa\x2d4e2c\x2da07d\x2d160a5b754c83-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d74lb2.mount: Deactivated successfully. Jul 2 08:58:09.083706 kubelet[2009]: I0702 08:58:09.083647 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-policysync" (OuterVolumeSpecName: "policysync") pod "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" (UID: "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83"). InnerVolumeSpecName "policysync". PluginName "kubernetes.io/host-path", VolumeGidValue "" Jul 2 08:58:09.083923 kubelet[2009]: I0702 08:58:09.083875 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-var-lib-calico" (OuterVolumeSpecName: "var-lib-calico") pod "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" (UID: "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83"). InnerVolumeSpecName "var-lib-calico". PluginName "kubernetes.io/host-path", VolumeGidValue "" Jul 2 08:58:09.084043 kubelet[2009]: I0702 08:58:09.084025 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-var-run-calico" (OuterVolumeSpecName: "var-run-calico") pod "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" (UID: "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83"). InnerVolumeSpecName "var-run-calico". PluginName "kubernetes.io/host-path", VolumeGidValue "" Jul 2 08:58:09.084210 kubelet[2009]: I0702 08:58:09.084186 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-cni-bin-dir" (OuterVolumeSpecName: "cni-bin-dir") pod "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" (UID: "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83"). InnerVolumeSpecName "cni-bin-dir". PluginName "kubernetes.io/host-path", VolumeGidValue "" Jul 2 08:58:09.084431 kubelet[2009]: I0702 08:58:09.084186 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" (UID: "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Jul 2 08:58:09.084535 kubelet[2009]: I0702 08:58:09.084220 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-cni-log-dir" (OuterVolumeSpecName: "cni-log-dir") pod "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" (UID: "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83"). InnerVolumeSpecName "cni-log-dir". PluginName "kubernetes.io/host-path", VolumeGidValue "" Jul 2 08:58:09.084653 kubelet[2009]: I0702 08:58:09.084242 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" (UID: "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Jul 2 08:58:09.085000 kubelet[2009]: I0702 08:58:09.084975 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-kube-api-access-74lb2" (OuterVolumeSpecName: "kube-api-access-74lb2") pod "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" (UID: "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83"). InnerVolumeSpecName "kube-api-access-74lb2". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 2 08:58:09.087274 systemd[1]: var-lib-kubelet-pods-7b22d5ac\x2dd3fa\x2d4e2c\x2da07d\x2d160a5b754c83-volumes-kubernetes.io\x7esecret-node\x2dcerts.mount: Deactivated successfully. Jul 2 08:58:09.088992 kubelet[2009]: I0702 08:58:09.088720 2009 operation_generator.go:887] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-node-certs" (OuterVolumeSpecName: "node-certs") pod "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" (UID: "7b22d5ac-d3fa-4e2c-a07d-160a5b754c83"). InnerVolumeSpecName "node-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 2 08:58:09.177262 kubelet[2009]: I0702 08:58:09.177214 2009 reconciler_common.go:300] "Volume detached for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-var-run-calico\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:09.177446 kubelet[2009]: I0702 08:58:09.177279 2009 reconciler_common.go:300] "Volume detached for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-cni-bin-dir\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:09.177446 kubelet[2009]: I0702 08:58:09.177311 2009 reconciler_common.go:300] "Volume detached for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-cni-net-dir\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:09.177446 kubelet[2009]: I0702 08:58:09.177344 2009 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-74lb2\" (UniqueName: \"kubernetes.io/projected/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-kube-api-access-74lb2\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:09.177446 kubelet[2009]: I0702 08:58:09.177374 2009 reconciler_common.go:300] "Volume detached for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-tigera-ca-bundle\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:09.177446 kubelet[2009]: I0702 08:58:09.177403 2009 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-xtables-lock\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:09.177446 kubelet[2009]: I0702 08:58:09.177430 2009 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-lib-modules\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:09.177706 kubelet[2009]: I0702 08:58:09.177459 2009 reconciler_common.go:300] "Volume detached for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-cni-log-dir\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:09.177706 kubelet[2009]: I0702 08:58:09.177487 2009 reconciler_common.go:300] "Volume detached for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-flexvol-driver-host\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:09.177706 kubelet[2009]: I0702 08:58:09.177514 2009 reconciler_common.go:300] "Volume detached for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-node-certs\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:09.177706 kubelet[2009]: I0702 08:58:09.177541 2009 reconciler_common.go:300] "Volume detached for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-policysync\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:09.177706 kubelet[2009]: I0702 08:58:09.177568 2009 reconciler_common.go:300] "Volume detached for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83-var-lib-calico\") on node \"ci-3510-3-5-e-e1038c2d1d.novalocal\" DevicePath \"\"" Jul 2 08:58:09.680613 kubelet[2009]: I0702 08:58:09.680539 2009 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="99562cc8-3281-40de-94ae-0a5cee0b60a2" path="/var/lib/kubelet/pods/99562cc8-3281-40de-94ae-0a5cee0b60a2/volumes" Jul 2 08:58:09.689037 systemd[1]: Removed slice kubepods-besteffort-pod7b22d5ac_d3fa_4e2c_a07d_160a5b754c83.slice. Jul 2 08:58:09.887270 kubelet[2009]: I0702 08:58:09.887189 2009 scope.go:117] "RemoveContainer" containerID="8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be" Jul 2 08:58:09.890680 env[1136]: time="2024-07-02T08:58:09.890232081Z" level=info msg="RemoveContainer for \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\"" Jul 2 08:58:09.898288 env[1136]: time="2024-07-02T08:58:09.898195614Z" level=info msg="RemoveContainer for \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\" returns successfully" Jul 2 08:58:09.898767 kubelet[2009]: I0702 08:58:09.898717 2009 scope.go:117] "RemoveContainer" containerID="8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be" Jul 2 08:58:09.899278 env[1136]: time="2024-07-02T08:58:09.899123080Z" level=error msg="ContainerStatus for \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\": not found" Jul 2 08:58:09.899541 kubelet[2009]: E0702 08:58:09.899497 2009 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\": not found" containerID="8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be" Jul 2 08:58:09.899733 kubelet[2009]: I0702 08:58:09.899577 2009 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be"} err="failed to get container status \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\": rpc error: code = NotFound desc = an error occurred when try to find container \"8b4809b5d44c935a3914f9676516ebc7ae048aef82eb48b051e0f4890a9d45be\": not found" Jul 2 08:58:09.970238 kubelet[2009]: I0702 08:58:09.970058 2009 topology_manager.go:215] "Topology Admit Handler" podUID="caecef9c-24e2-4ab7-8c00-4b378c4c0159" podNamespace="calico-system" podName="calico-node-ntm5v" Jul 2 08:58:09.970238 kubelet[2009]: E0702 08:58:09.970160 2009 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" containerName="flexvol-driver" Jul 2 08:58:09.970238 kubelet[2009]: I0702 08:58:09.970214 2009 memory_manager.go:354] "RemoveStaleState removing state" podUID="7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" containerName="flexvol-driver" Jul 2 08:58:09.990841 kubelet[2009]: I0702 08:58:09.990805 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/caecef9c-24e2-4ab7-8c00-4b378c4c0159-lib-modules\") pod \"calico-node-ntm5v\" (UID: \"caecef9c-24e2-4ab7-8c00-4b378c4c0159\") " pod="calico-system/calico-node-ntm5v" Jul 2 08:58:09.991070 kubelet[2009]: I0702 08:58:09.991057 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/caecef9c-24e2-4ab7-8c00-4b378c4c0159-tigera-ca-bundle\") pod \"calico-node-ntm5v\" (UID: \"caecef9c-24e2-4ab7-8c00-4b378c4c0159\") " pod="calico-system/calico-node-ntm5v" Jul 2 08:58:09.991198 kubelet[2009]: I0702 08:58:09.991185 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/caecef9c-24e2-4ab7-8c00-4b378c4c0159-cni-log-dir\") pod \"calico-node-ntm5v\" (UID: \"caecef9c-24e2-4ab7-8c00-4b378c4c0159\") " pod="calico-system/calico-node-ntm5v" Jul 2 08:58:09.991322 kubelet[2009]: I0702 08:58:09.991305 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/caecef9c-24e2-4ab7-8c00-4b378c4c0159-flexvol-driver-host\") pod \"calico-node-ntm5v\" (UID: \"caecef9c-24e2-4ab7-8c00-4b378c4c0159\") " pod="calico-system/calico-node-ntm5v" Jul 2 08:58:09.991485 kubelet[2009]: I0702 08:58:09.991467 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/caecef9c-24e2-4ab7-8c00-4b378c4c0159-cni-bin-dir\") pod \"calico-node-ntm5v\" (UID: \"caecef9c-24e2-4ab7-8c00-4b378c4c0159\") " pod="calico-system/calico-node-ntm5v" Jul 2 08:58:09.991666 kubelet[2009]: I0702 08:58:09.991647 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/caecef9c-24e2-4ab7-8c00-4b378c4c0159-xtables-lock\") pod \"calico-node-ntm5v\" (UID: \"caecef9c-24e2-4ab7-8c00-4b378c4c0159\") " pod="calico-system/calico-node-ntm5v" Jul 2 08:58:09.991787 kubelet[2009]: I0702 08:58:09.991775 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-w2w9g\" (UniqueName: \"kubernetes.io/projected/caecef9c-24e2-4ab7-8c00-4b378c4c0159-kube-api-access-w2w9g\") pod \"calico-node-ntm5v\" (UID: \"caecef9c-24e2-4ab7-8c00-4b378c4c0159\") " pod="calico-system/calico-node-ntm5v" Jul 2 08:58:09.991892 kubelet[2009]: I0702 08:58:09.991881 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/caecef9c-24e2-4ab7-8c00-4b378c4c0159-node-certs\") pod \"calico-node-ntm5v\" (UID: \"caecef9c-24e2-4ab7-8c00-4b378c4c0159\") " pod="calico-system/calico-node-ntm5v" Jul 2 08:58:09.992017 kubelet[2009]: I0702 08:58:09.992005 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/caecef9c-24e2-4ab7-8c00-4b378c4c0159-cni-net-dir\") pod \"calico-node-ntm5v\" (UID: \"caecef9c-24e2-4ab7-8c00-4b378c4c0159\") " pod="calico-system/calico-node-ntm5v" Jul 2 08:58:09.992305 kubelet[2009]: I0702 08:58:09.992290 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/caecef9c-24e2-4ab7-8c00-4b378c4c0159-policysync\") pod \"calico-node-ntm5v\" (UID: \"caecef9c-24e2-4ab7-8c00-4b378c4c0159\") " pod="calico-system/calico-node-ntm5v" Jul 2 08:58:09.992561 kubelet[2009]: I0702 08:58:09.992534 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/caecef9c-24e2-4ab7-8c00-4b378c4c0159-var-run-calico\") pod \"calico-node-ntm5v\" (UID: \"caecef9c-24e2-4ab7-8c00-4b378c4c0159\") " pod="calico-system/calico-node-ntm5v" Jul 2 08:58:09.992698 kubelet[2009]: I0702 08:58:09.992683 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/caecef9c-24e2-4ab7-8c00-4b378c4c0159-var-lib-calico\") pod \"calico-node-ntm5v\" (UID: \"caecef9c-24e2-4ab7-8c00-4b378c4c0159\") " pod="calico-system/calico-node-ntm5v" Jul 2 08:58:09.994954 systemd[1]: Created slice kubepods-besteffort-podcaecef9c_24e2_4ab7_8c00_4b378c4c0159.slice. Jul 2 08:58:10.303059 env[1136]: time="2024-07-02T08:58:10.302901898Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-ntm5v,Uid:caecef9c-24e2-4ab7-8c00-4b378c4c0159,Namespace:calico-system,Attempt:0,}" Jul 2 08:58:10.340873 env[1136]: time="2024-07-02T08:58:10.340474795Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:58:10.341274 env[1136]: time="2024-07-02T08:58:10.341141028Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:58:10.341628 env[1136]: time="2024-07-02T08:58:10.341486649Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:58:10.342448 env[1136]: time="2024-07-02T08:58:10.342331909Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f67177077f3c61cb6793988a8b2e91ac3cb2cbbe75ebdc29b50fd97b5ba842e3 pid=2848 runtime=io.containerd.runc.v2 Jul 2 08:58:10.388034 systemd[1]: Started cri-containerd-f67177077f3c61cb6793988a8b2e91ac3cb2cbbe75ebdc29b50fd97b5ba842e3.scope. Jul 2 08:58:10.407005 kernel: audit: type=1400 audit(1719910690.398:1042): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.407128 kernel: audit: type=1400 audit(1719910690.398:1043): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.407155 kernel: audit: type=1400 audit(1719910690.398:1044): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.410766 kernel: audit: type=1400 audit(1719910690.398:1045): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.426303 kernel: audit: type=1400 audit(1719910690.398:1046): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.426600 kernel: audit: type=1400 audit(1719910690.398:1047): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.432036 kernel: audit: type=1400 audit(1719910690.398:1048): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.432106 kernel: audit: type=1400 audit(1719910690.398:1049): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.410000 audit: BPF prog-id=138 op=LOAD Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2848 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:10.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636373137373037376633633631636236373933393838613862326539 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2848 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:10.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636373137373037376633633631636236373933393838613862326539 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit: BPF prog-id=139 op=LOAD Jul 2 08:58:10.414000 audit[2857]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003cace0 items=0 ppid=2848 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:10.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636373137373037376633633631636236373933393838613862326539 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit: BPF prog-id=140 op=LOAD Jul 2 08:58:10.414000 audit[2857]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003cad28 items=0 ppid=2848 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:10.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636373137373037376633633631636236373933393838613862326539 Jul 2 08:58:10.414000 audit: BPF prog-id=140 op=UNLOAD Jul 2 08:58:10.414000 audit: BPF prog-id=139 op=UNLOAD Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.414000 audit: BPF prog-id=141 op=LOAD Jul 2 08:58:10.414000 audit[2857]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003cb138 items=0 ppid=2848 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:10.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636373137373037376633633631636236373933393838613862326539 Jul 2 08:58:10.447834 env[1136]: time="2024-07-02T08:58:10.447781893Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-ntm5v,Uid:caecef9c-24e2-4ab7-8c00-4b378c4c0159,Namespace:calico-system,Attempt:0,} returns sandbox id \"f67177077f3c61cb6793988a8b2e91ac3cb2cbbe75ebdc29b50fd97b5ba842e3\"" Jul 2 08:58:10.453075 env[1136]: time="2024-07-02T08:58:10.453011581Z" level=info msg="CreateContainer within sandbox \"f67177077f3c61cb6793988a8b2e91ac3cb2cbbe75ebdc29b50fd97b5ba842e3\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 2 08:58:10.469794 env[1136]: time="2024-07-02T08:58:10.469750273Z" level=info msg="CreateContainer within sandbox \"f67177077f3c61cb6793988a8b2e91ac3cb2cbbe75ebdc29b50fd97b5ba842e3\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"c61da8dd538987f4ef695d0d1becd4926492e843a6d1e39981d7cfecad17f5a8\"" Jul 2 08:58:10.472079 env[1136]: time="2024-07-02T08:58:10.472024030Z" level=info msg="StartContainer for \"c61da8dd538987f4ef695d0d1becd4926492e843a6d1e39981d7cfecad17f5a8\"" Jul 2 08:58:10.492258 systemd[1]: Started cri-containerd-c61da8dd538987f4ef695d0d1becd4926492e843a6d1e39981d7cfecad17f5a8.scope. Jul 2 08:58:10.512000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.512000 audit[2888]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fee05adc018 items=0 ppid=2848 pid=2888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:10.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336316461386464353338393837663465663639356430643162656364 Jul 2 08:58:10.512000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.512000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.512000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.512000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.512000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.512000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.512000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.512000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.512000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.512000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.512000 audit: BPF prog-id=142 op=LOAD Jul 2 08:58:10.512000 audit[2888]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0001fa668 items=0 ppid=2848 pid=2888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:10.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336316461386464353338393837663465663639356430643162656364 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit: BPF prog-id=143 op=LOAD Jul 2 08:58:10.513000 audit[2888]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0001fa6b8 items=0 ppid=2848 pid=2888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:10.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336316461386464353338393837663465663639356430643162656364 Jul 2 08:58:10.513000 audit: BPF prog-id=143 op=UNLOAD Jul 2 08:58:10.513000 audit: BPF prog-id=142 op=UNLOAD Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:10.513000 audit: BPF prog-id=144 op=LOAD Jul 2 08:58:10.513000 audit[2888]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0001fa748 items=0 ppid=2848 pid=2888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:10.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336316461386464353338393837663465663639356430643162656364 Jul 2 08:58:10.545331 env[1136]: time="2024-07-02T08:58:10.545275819Z" level=info msg="StartContainer for \"c61da8dd538987f4ef695d0d1becd4926492e843a6d1e39981d7cfecad17f5a8\" returns successfully" Jul 2 08:58:10.549527 systemd[1]: cri-containerd-c61da8dd538987f4ef695d0d1becd4926492e843a6d1e39981d7cfecad17f5a8.scope: Deactivated successfully. Jul 2 08:58:10.552000 audit: BPF prog-id=144 op=UNLOAD Jul 2 08:58:10.597181 env[1136]: time="2024-07-02T08:58:10.597126106Z" level=info msg="shim disconnected" id=c61da8dd538987f4ef695d0d1becd4926492e843a6d1e39981d7cfecad17f5a8 Jul 2 08:58:10.597395 env[1136]: time="2024-07-02T08:58:10.597183353Z" level=warning msg="cleaning up after shim disconnected" id=c61da8dd538987f4ef695d0d1becd4926492e843a6d1e39981d7cfecad17f5a8 namespace=k8s.io Jul 2 08:58:10.597395 env[1136]: time="2024-07-02T08:58:10.597196267Z" level=info msg="cleaning up dead shim" Jul 2 08:58:10.607050 env[1136]: time="2024-07-02T08:58:10.606864306Z" level=warning msg="cleanup warnings time=\"2024-07-02T08:58:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2927 runtime=io.containerd.runc.v2\n" Jul 2 08:58:10.676007 kubelet[2009]: E0702 08:58:10.675890 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jqbj5" podUID="6f72bbc2-6c33-4033-bc07-2e6f5f55f594" Jul 2 08:58:10.891994 env[1136]: time="2024-07-02T08:58:10.891830967Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\"" Jul 2 08:58:11.678109 kubelet[2009]: I0702 08:58:11.678067 2009 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="7b22d5ac-d3fa-4e2c-a07d-160a5b754c83" path="/var/lib/kubelet/pods/7b22d5ac-d3fa-4e2c-a07d-160a5b754c83/volumes" Jul 2 08:58:12.677009 kubelet[2009]: E0702 08:58:12.676222 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jqbj5" podUID="6f72bbc2-6c33-4033-bc07-2e6f5f55f594" Jul 2 08:58:14.675596 kubelet[2009]: E0702 08:58:14.675528 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jqbj5" podUID="6f72bbc2-6c33-4033-bc07-2e6f5f55f594" Jul 2 08:58:16.675745 kubelet[2009]: E0702 08:58:16.675693 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jqbj5" podUID="6f72bbc2-6c33-4033-bc07-2e6f5f55f594" Jul 2 08:58:18.676463 kubelet[2009]: E0702 08:58:18.676377 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jqbj5" podUID="6f72bbc2-6c33-4033-bc07-2e6f5f55f594" Jul 2 08:58:19.420999 env[1136]: time="2024-07-02T08:58:19.420901316Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:19.435155 env[1136]: time="2024-07-02T08:58:19.435085484Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:107014d9f4c891a0235fa80b55df22451e8804ede5b891b632c5779ca3ab07a7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:19.447374 env[1136]: time="2024-07-02T08:58:19.447300499Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:19.455554 env[1136]: time="2024-07-02T08:58:19.455439530Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:67fdc0954d3c96f9a7938fca4d5759c835b773dfb5cb513903e89d21462d886e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:19.457543 env[1136]: time="2024-07-02T08:58:19.457465740Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\" returns image reference \"sha256:107014d9f4c891a0235fa80b55df22451e8804ede5b891b632c5779ca3ab07a7\"" Jul 2 08:58:19.469019 env[1136]: time="2024-07-02T08:58:19.468919484Z" level=info msg="CreateContainer within sandbox \"f67177077f3c61cb6793988a8b2e91ac3cb2cbbe75ebdc29b50fd97b5ba842e3\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 2 08:58:19.516095 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount138344010.mount: Deactivated successfully. Jul 2 08:58:19.526887 env[1136]: time="2024-07-02T08:58:19.526761200Z" level=info msg="CreateContainer within sandbox \"f67177077f3c61cb6793988a8b2e91ac3cb2cbbe75ebdc29b50fd97b5ba842e3\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"a37352d123a4e67ac04b51b4886eb1588eb8e328bfa13b23dca8c35da2702903\"" Jul 2 08:58:19.529362 env[1136]: time="2024-07-02T08:58:19.529281939Z" level=info msg="StartContainer for \"a37352d123a4e67ac04b51b4886eb1588eb8e328bfa13b23dca8c35da2702903\"" Jul 2 08:58:19.586730 systemd[1]: run-containerd-runc-k8s.io-a37352d123a4e67ac04b51b4886eb1588eb8e328bfa13b23dca8c35da2702903-runc.06WpsV.mount: Deactivated successfully. Jul 2 08:58:19.596647 systemd[1]: Started cri-containerd-a37352d123a4e67ac04b51b4886eb1588eb8e328bfa13b23dca8c35da2702903.scope. Jul 2 08:58:19.636742 kernel: kauditd_printk_skb: 93 callbacks suppressed Jul 2 08:58:19.637715 kernel: audit: type=1400 audit(1719910699.631:1067): avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.631000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.631000 audit[2952]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7efcb8c2dc98 items=0 ppid=2848 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:19.643644 kernel: audit: type=1300 audit(1719910699.631:1067): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7efcb8c2dc98 items=0 ppid=2848 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:19.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133373335326431323361346536376163303462353162343838366562 Jul 2 08:58:19.631000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.652441 kernel: audit: type=1327 audit(1719910699.631:1067): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133373335326431323361346536376163303462353162343838366562 Jul 2 08:58:19.652510 kernel: audit: type=1400 audit(1719910699.631:1068): avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.631000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.631000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.660035 kernel: audit: type=1400 audit(1719910699.631:1068): avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.663159 kernel: audit: type=1400 audit(1719910699.631:1068): avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.663212 kernel: audit: type=1400 audit(1719910699.631:1068): avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.631000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.631000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.668874 kernel: audit: type=1400 audit(1719910699.631:1068): avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.631000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.675629 kernel: audit: type=1400 audit(1719910699.631:1068): avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.631000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.631000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.631000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.631000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.631000 audit: BPF prog-id=145 op=LOAD Jul 2 08:58:19.631000 audit[2952]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0002b0878 items=0 ppid=2848 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:19.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133373335326431323361346536376163303462353162343838366562 Jul 2 08:58:19.636000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.636000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.636000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.636000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.636000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.636000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.636000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.636000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.684641 kernel: audit: type=1400 audit(1719910699.631:1068): avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.636000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.636000 audit: BPF prog-id=146 op=LOAD Jul 2 08:58:19.636000 audit[2952]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0002b08c8 items=0 ppid=2848 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:19.636000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133373335326431323361346536376163303462353162343838366562 Jul 2 08:58:19.637000 audit: BPF prog-id=146 op=UNLOAD Jul 2 08:58:19.637000 audit: BPF prog-id=145 op=UNLOAD Jul 2 08:58:19.637000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.637000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.637000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.637000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.637000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.637000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.637000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.637000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.637000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.637000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:19.637000 audit: BPF prog-id=147 op=LOAD Jul 2 08:58:19.637000 audit[2952]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0002b0958 items=0 ppid=2848 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:19.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133373335326431323361346536376163303462353162343838366562 Jul 2 08:58:19.696762 env[1136]: time="2024-07-02T08:58:19.696674637Z" level=info msg="StartContainer for \"a37352d123a4e67ac04b51b4886eb1588eb8e328bfa13b23dca8c35da2702903\" returns successfully" Jul 2 08:58:20.511986 kubelet[2009]: I0702 08:58:20.511939 2009 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 2 08:58:20.676419 kubelet[2009]: E0702 08:58:20.676302 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jqbj5" podUID="6f72bbc2-6c33-4033-bc07-2e6f5f55f594" Jul 2 08:58:20.928000 audit[2979]: NETFILTER_CFG table=filter:101 family=2 entries=15 op=nft_register_rule pid=2979 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:20.928000 audit[2979]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffd73fc4ea0 a2=0 a3=7ffd73fc4e8c items=0 ppid=2142 pid=2979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:20.928000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:20.936000 audit[2979]: NETFILTER_CFG table=nat:102 family=2 entries=19 op=nft_register_chain pid=2979 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:20.936000 audit[2979]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd73fc4ea0 a2=0 a3=7ffd73fc4e8c items=0 ppid=2142 pid=2979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:20.936000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:21.456783 env[1136]: time="2024-07-02T08:58:21.456713363Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 08:58:21.460292 systemd[1]: cri-containerd-a37352d123a4e67ac04b51b4886eb1588eb8e328bfa13b23dca8c35da2702903.scope: Deactivated successfully. Jul 2 08:58:21.464000 audit: BPF prog-id=147 op=UNLOAD Jul 2 08:58:21.477980 kubelet[2009]: I0702 08:58:21.477936 2009 kubelet_node_status.go:497] "Fast updating node status as it just became ready" Jul 2 08:58:21.494677 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a37352d123a4e67ac04b51b4886eb1588eb8e328bfa13b23dca8c35da2702903-rootfs.mount: Deactivated successfully. Jul 2 08:58:21.543487 env[1136]: time="2024-07-02T08:58:21.543388908Z" level=info msg="shim disconnected" id=a37352d123a4e67ac04b51b4886eb1588eb8e328bfa13b23dca8c35da2702903 Jul 2 08:58:21.543487 env[1136]: time="2024-07-02T08:58:21.543485580Z" level=warning msg="cleaning up after shim disconnected" id=a37352d123a4e67ac04b51b4886eb1588eb8e328bfa13b23dca8c35da2702903 namespace=k8s.io Jul 2 08:58:21.543789 env[1136]: time="2024-07-02T08:58:21.543507732Z" level=info msg="cleaning up dead shim" Jul 2 08:58:21.558159 env[1136]: time="2024-07-02T08:58:21.558062052Z" level=warning msg="cleanup warnings time=\"2024-07-02T08:58:21Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2994 runtime=io.containerd.runc.v2\n" Jul 2 08:58:21.566550 kubelet[2009]: I0702 08:58:21.566493 2009 topology_manager.go:215] "Topology Admit Handler" podUID="ab647899-eb65-46d0-97d7-4d252b79f921" podNamespace="kube-system" podName="coredns-76f75df574-6w7g4" Jul 2 08:58:21.573689 systemd[1]: Created slice kubepods-burstable-podab647899_eb65_46d0_97d7_4d252b79f921.slice. Jul 2 08:58:21.579691 kubelet[2009]: I0702 08:58:21.579613 2009 topology_manager.go:215] "Topology Admit Handler" podUID="08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6" podNamespace="kube-system" podName="coredns-76f75df574-7p8cb" Jul 2 08:58:21.586295 systemd[1]: Created slice kubepods-burstable-pod08e9b7e4_ebfd_45c4_8671_dcd7d32da4b6.slice. Jul 2 08:58:21.589011 kubelet[2009]: I0702 08:58:21.588975 2009 topology_manager.go:215] "Topology Admit Handler" podUID="3e63f945-4c76-4d3c-a7c2-bae61ae4b627" podNamespace="calico-system" podName="calico-kube-controllers-76df6cdb96-sb9dg" Jul 2 08:58:21.597476 systemd[1]: Created slice kubepods-besteffort-pod3e63f945_4c76_4d3c_a7c2_bae61ae4b627.slice. Jul 2 08:58:21.699749 kubelet[2009]: I0702 08:58:21.699682 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8d2gb\" (UniqueName: \"kubernetes.io/projected/ab647899-eb65-46d0-97d7-4d252b79f921-kube-api-access-8d2gb\") pod \"coredns-76f75df574-6w7g4\" (UID: \"ab647899-eb65-46d0-97d7-4d252b79f921\") " pod="kube-system/coredns-76f75df574-6w7g4" Jul 2 08:58:21.699749 kubelet[2009]: I0702 08:58:21.699737 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6-config-volume\") pod \"coredns-76f75df574-7p8cb\" (UID: \"08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6\") " pod="kube-system/coredns-76f75df574-7p8cb" Jul 2 08:58:21.699749 kubelet[2009]: I0702 08:58:21.699767 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3e63f945-4c76-4d3c-a7c2-bae61ae4b627-tigera-ca-bundle\") pod \"calico-kube-controllers-76df6cdb96-sb9dg\" (UID: \"3e63f945-4c76-4d3c-a7c2-bae61ae4b627\") " pod="calico-system/calico-kube-controllers-76df6cdb96-sb9dg" Jul 2 08:58:21.700186 kubelet[2009]: I0702 08:58:21.699802 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nrv6k\" (UniqueName: \"kubernetes.io/projected/3e63f945-4c76-4d3c-a7c2-bae61ae4b627-kube-api-access-nrv6k\") pod \"calico-kube-controllers-76df6cdb96-sb9dg\" (UID: \"3e63f945-4c76-4d3c-a7c2-bae61ae4b627\") " pod="calico-system/calico-kube-controllers-76df6cdb96-sb9dg" Jul 2 08:58:21.700186 kubelet[2009]: I0702 08:58:21.699832 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/ab647899-eb65-46d0-97d7-4d252b79f921-config-volume\") pod \"coredns-76f75df574-6w7g4\" (UID: \"ab647899-eb65-46d0-97d7-4d252b79f921\") " pod="kube-system/coredns-76f75df574-6w7g4" Jul 2 08:58:21.700186 kubelet[2009]: I0702 08:58:21.699863 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5469f\" (UniqueName: \"kubernetes.io/projected/08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6-kube-api-access-5469f\") pod \"coredns-76f75df574-7p8cb\" (UID: \"08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6\") " pod="kube-system/coredns-76f75df574-7p8cb" Jul 2 08:58:21.879668 env[1136]: time="2024-07-02T08:58:21.878963330Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-6w7g4,Uid:ab647899-eb65-46d0-97d7-4d252b79f921,Namespace:kube-system,Attempt:0,}" Jul 2 08:58:21.895646 env[1136]: time="2024-07-02T08:58:21.895530564Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-7p8cb,Uid:08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6,Namespace:kube-system,Attempt:0,}" Jul 2 08:58:21.920602 env[1136]: time="2024-07-02T08:58:21.920542312Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-76df6cdb96-sb9dg,Uid:3e63f945-4c76-4d3c-a7c2-bae61ae4b627,Namespace:calico-system,Attempt:0,}" Jul 2 08:58:21.936039 env[1136]: time="2024-07-02T08:58:21.936006242Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\"" Jul 2 08:58:22.104351 env[1136]: time="2024-07-02T08:58:22.104282911Z" level=error msg="Failed to destroy network for sandbox \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.105022 env[1136]: time="2024-07-02T08:58:22.104985522Z" level=error msg="encountered an error cleaning up failed sandbox \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.105188 env[1136]: time="2024-07-02T08:58:22.105144061Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-76df6cdb96-sb9dg,Uid:3e63f945-4c76-4d3c-a7c2-bae61ae4b627,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.105964 kubelet[2009]: E0702 08:58:22.105527 2009 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.105964 kubelet[2009]: E0702 08:58:22.105607 2009 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-76df6cdb96-sb9dg" Jul 2 08:58:22.105964 kubelet[2009]: E0702 08:58:22.105635 2009 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-76df6cdb96-sb9dg" Jul 2 08:58:22.106128 kubelet[2009]: E0702 08:58:22.105695 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-76df6cdb96-sb9dg_calico-system(3e63f945-4c76-4d3c-a7c2-bae61ae4b627)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-76df6cdb96-sb9dg_calico-system(3e63f945-4c76-4d3c-a7c2-bae61ae4b627)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-76df6cdb96-sb9dg" podUID="3e63f945-4c76-4d3c-a7c2-bae61ae4b627" Jul 2 08:58:22.118416 env[1136]: time="2024-07-02T08:58:22.118350264Z" level=error msg="Failed to destroy network for sandbox \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.118952 env[1136]: time="2024-07-02T08:58:22.118919274Z" level=error msg="encountered an error cleaning up failed sandbox \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.119081 env[1136]: time="2024-07-02T08:58:22.119052714Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-6w7g4,Uid:ab647899-eb65-46d0-97d7-4d252b79f921,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.120639 kubelet[2009]: E0702 08:58:22.119419 2009 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.120639 kubelet[2009]: E0702 08:58:22.119476 2009 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-6w7g4" Jul 2 08:58:22.120639 kubelet[2009]: E0702 08:58:22.119516 2009 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-6w7g4" Jul 2 08:58:22.120924 kubelet[2009]: E0702 08:58:22.119619 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-76f75df574-6w7g4_kube-system(ab647899-eb65-46d0-97d7-4d252b79f921)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-76f75df574-6w7g4_kube-system(ab647899-eb65-46d0-97d7-4d252b79f921)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-6w7g4" podUID="ab647899-eb65-46d0-97d7-4d252b79f921" Jul 2 08:58:22.122881 env[1136]: time="2024-07-02T08:58:22.122818773Z" level=error msg="Failed to destroy network for sandbox \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.123660 env[1136]: time="2024-07-02T08:58:22.123622715Z" level=error msg="encountered an error cleaning up failed sandbox \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.123817 env[1136]: time="2024-07-02T08:58:22.123774069Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-7p8cb,Uid:08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.124171 kubelet[2009]: E0702 08:58:22.124139 2009 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.124242 kubelet[2009]: E0702 08:58:22.124208 2009 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-7p8cb" Jul 2 08:58:22.124242 kubelet[2009]: E0702 08:58:22.124235 2009 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-7p8cb" Jul 2 08:58:22.124325 kubelet[2009]: E0702 08:58:22.124313 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-76f75df574-7p8cb_kube-system(08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-76f75df574-7p8cb_kube-system(08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-7p8cb" podUID="08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6" Jul 2 08:58:22.501538 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548-shm.mount: Deactivated successfully. Jul 2 08:58:22.688069 systemd[1]: Created slice kubepods-besteffort-pod6f72bbc2_6c33_4033_bc07_2e6f5f55f594.slice. Jul 2 08:58:22.694403 env[1136]: time="2024-07-02T08:58:22.694324633Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-jqbj5,Uid:6f72bbc2-6c33-4033-bc07-2e6f5f55f594,Namespace:calico-system,Attempt:0,}" Jul 2 08:58:22.868609 env[1136]: time="2024-07-02T08:58:22.868505744Z" level=error msg="Failed to destroy network for sandbox \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.870936 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606-shm.mount: Deactivated successfully. Jul 2 08:58:22.872088 env[1136]: time="2024-07-02T08:58:22.871987209Z" level=error msg="encountered an error cleaning up failed sandbox \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.872088 env[1136]: time="2024-07-02T08:58:22.872061758Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-jqbj5,Uid:6f72bbc2-6c33-4033-bc07-2e6f5f55f594,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.874270 kubelet[2009]: E0702 08:58:22.872363 2009 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:22.874270 kubelet[2009]: E0702 08:58:22.872431 2009 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-jqbj5" Jul 2 08:58:22.874270 kubelet[2009]: E0702 08:58:22.872462 2009 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-jqbj5" Jul 2 08:58:22.875957 kubelet[2009]: E0702 08:58:22.872536 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-jqbj5_calico-system(6f72bbc2-6c33-4033-bc07-2e6f5f55f594)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-jqbj5_calico-system(6f72bbc2-6c33-4033-bc07-2e6f5f55f594)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-jqbj5" podUID="6f72bbc2-6c33-4033-bc07-2e6f5f55f594" Jul 2 08:58:22.937984 kubelet[2009]: I0702 08:58:22.937943 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:22.939008 env[1136]: time="2024-07-02T08:58:22.938943167Z" level=info msg="StopPodSandbox for \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\"" Jul 2 08:58:22.942260 kubelet[2009]: I0702 08:58:22.942208 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:22.944813 env[1136]: time="2024-07-02T08:58:22.944757466Z" level=info msg="StopPodSandbox for \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\"" Jul 2 08:58:22.956873 kubelet[2009]: I0702 08:58:22.956829 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:22.961479 env[1136]: time="2024-07-02T08:58:22.961290283Z" level=info msg="StopPodSandbox for \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\"" Jul 2 08:58:22.971924 kubelet[2009]: I0702 08:58:22.971885 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:22.977935 env[1136]: time="2024-07-02T08:58:22.977803463Z" level=info msg="StopPodSandbox for \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\"" Jul 2 08:58:23.031754 env[1136]: time="2024-07-02T08:58:23.031683138Z" level=error msg="StopPodSandbox for \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\" failed" error="failed to destroy network for sandbox \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:23.033131 kubelet[2009]: E0702 08:58:23.032920 2009 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:23.033131 kubelet[2009]: E0702 08:58:23.033002 2009 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606"} Jul 2 08:58:23.033131 kubelet[2009]: E0702 08:58:23.033062 2009 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6f72bbc2-6c33-4033-bc07-2e6f5f55f594\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 08:58:23.033131 kubelet[2009]: E0702 08:58:23.033105 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6f72bbc2-6c33-4033-bc07-2e6f5f55f594\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-jqbj5" podUID="6f72bbc2-6c33-4033-bc07-2e6f5f55f594" Jul 2 08:58:23.033647 env[1136]: time="2024-07-02T08:58:23.033567721Z" level=error msg="StopPodSandbox for \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\" failed" error="failed to destroy network for sandbox \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:23.034124 kubelet[2009]: E0702 08:58:23.034094 2009 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:23.034186 kubelet[2009]: E0702 08:58:23.034149 2009 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2"} Jul 2 08:58:23.034231 kubelet[2009]: E0702 08:58:23.034197 2009 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3e63f945-4c76-4d3c-a7c2-bae61ae4b627\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 08:58:23.034296 kubelet[2009]: E0702 08:58:23.034240 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3e63f945-4c76-4d3c-a7c2-bae61ae4b627\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-76df6cdb96-sb9dg" podUID="3e63f945-4c76-4d3c-a7c2-bae61ae4b627" Jul 2 08:58:23.102082 env[1136]: time="2024-07-02T08:58:23.101968067Z" level=error msg="StopPodSandbox for \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\" failed" error="failed to destroy network for sandbox \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:23.103866 kubelet[2009]: E0702 08:58:23.103105 2009 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:23.103866 kubelet[2009]: E0702 08:58:23.103282 2009 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548"} Jul 2 08:58:23.103866 kubelet[2009]: E0702 08:58:23.103530 2009 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ab647899-eb65-46d0-97d7-4d252b79f921\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 08:58:23.103866 kubelet[2009]: E0702 08:58:23.103773 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ab647899-eb65-46d0-97d7-4d252b79f921\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-6w7g4" podUID="ab647899-eb65-46d0-97d7-4d252b79f921" Jul 2 08:58:23.105943 env[1136]: time="2024-07-02T08:58:23.105855414Z" level=error msg="StopPodSandbox for \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\" failed" error="failed to destroy network for sandbox \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:58:23.107549 kubelet[2009]: E0702 08:58:23.107494 2009 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:23.107666 kubelet[2009]: E0702 08:58:23.107558 2009 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864"} Jul 2 08:58:23.107666 kubelet[2009]: E0702 08:58:23.107631 2009 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 08:58:23.107782 kubelet[2009]: E0702 08:58:23.107674 2009 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-7p8cb" podUID="08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6" Jul 2 08:58:32.070033 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4254783187.mount: Deactivated successfully. Jul 2 08:58:32.114353 env[1136]: time="2024-07-02T08:58:32.114227218Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:32.121486 env[1136]: time="2024-07-02T08:58:32.121425141Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4e42b6f329bc1d197d97f6d2a1289b9e9f4a9560db3a36c8cffb5e95e64e4b49,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:32.124343 env[1136]: time="2024-07-02T08:58:32.124279023Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:32.130716 env[1136]: time="2024-07-02T08:58:32.130631027Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:95f8004836427050c9997ad0800819ced5636f6bda647b4158fc7c497910c8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:32.131384 env[1136]: time="2024-07-02T08:58:32.131312267Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\" returns image reference \"sha256:4e42b6f329bc1d197d97f6d2a1289b9e9f4a9560db3a36c8cffb5e95e64e4b49\"" Jul 2 08:58:32.209171 env[1136]: time="2024-07-02T08:58:32.209092299Z" level=info msg="CreateContainer within sandbox \"f67177077f3c61cb6793988a8b2e91ac3cb2cbbe75ebdc29b50fd97b5ba842e3\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 2 08:58:32.255060 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3575491028.mount: Deactivated successfully. Jul 2 08:58:32.269702 env[1136]: time="2024-07-02T08:58:32.269550176Z" level=info msg="CreateContainer within sandbox \"f67177077f3c61cb6793988a8b2e91ac3cb2cbbe75ebdc29b50fd97b5ba842e3\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"fefa91c0f20fd6514cca5bc6df63e08d4576f3562119ba891e61cc47ade7e4ea\"" Jul 2 08:58:32.271458 env[1136]: time="2024-07-02T08:58:32.271333436Z" level=info msg="StartContainer for \"fefa91c0f20fd6514cca5bc6df63e08d4576f3562119ba891e61cc47ade7e4ea\"" Jul 2 08:58:32.308204 systemd[1]: Started cri-containerd-fefa91c0f20fd6514cca5bc6df63e08d4576f3562119ba891e61cc47ade7e4ea.scope. Jul 2 08:58:32.348000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.350660 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 2 08:58:32.350752 kernel: audit: type=1400 audit(1719910712.348:1076): avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.348000 audit[3235]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f28cf1e42f8 items=0 ppid=2848 pid=3235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:32.363663 kernel: audit: type=1300 audit(1719910712.348:1076): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f28cf1e42f8 items=0 ppid=2848 pid=3235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:32.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665666139316330663230666436353134636361356263366466363365 Jul 2 08:58:32.369762 kernel: audit: type=1327 audit(1719910712.348:1076): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665666139316330663230666436353134636361356263366466363365 Jul 2 08:58:32.369816 kernel: audit: type=1400 audit(1719910712.349:1077): avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.349000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.373381 kernel: audit: type=1400 audit(1719910712.349:1077): avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.349000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.376956 kernel: audit: type=1400 audit(1719910712.349:1077): avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.349000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.380287 kernel: audit: type=1400 audit(1719910712.349:1077): avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.349000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.384060 kernel: audit: type=1400 audit(1719910712.349:1077): avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.349000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.387211 kernel: audit: type=1400 audit(1719910712.349:1077): avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.349000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.391193 kernel: audit: type=1400 audit(1719910712.349:1077): avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.349000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.349000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.349000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.349000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.349000 audit: BPF prog-id=148 op=LOAD Jul 2 08:58:32.349000 audit[3235]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c000024238 items=0 ppid=2848 pid=3235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:32.349000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665666139316330663230666436353134636361356263366466363365 Jul 2 08:58:32.368000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.368000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.368000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.368000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.368000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.368000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.368000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.368000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.368000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.368000 audit: BPF prog-id=149 op=LOAD Jul 2 08:58:32.368000 audit[3235]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c000024288 items=0 ppid=2848 pid=3235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:32.368000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665666139316330663230666436353134636361356263366466363365 Jul 2 08:58:32.379000 audit: BPF prog-id=149 op=UNLOAD Jul 2 08:58:32.379000 audit: BPF prog-id=148 op=UNLOAD Jul 2 08:58:32.379000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.379000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.379000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.379000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.379000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.379000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.379000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.379000 audit[3235]: AVC avc: denied { perfmon } for pid=3235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.379000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.379000 audit[3235]: AVC avc: denied { bpf } for pid=3235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:32.379000 audit: BPF prog-id=150 op=LOAD Jul 2 08:58:32.379000 audit[3235]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c000024318 items=0 ppid=2848 pid=3235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:32.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665666139316330663230666436353134636361356263366466363365 Jul 2 08:58:32.431892 env[1136]: time="2024-07-02T08:58:32.431831177Z" level=info msg="StartContainer for \"fefa91c0f20fd6514cca5bc6df63e08d4576f3562119ba891e61cc47ade7e4ea\" returns successfully" Jul 2 08:58:32.606360 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 2 08:58:32.607299 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 2 08:58:33.686767 env[1136]: time="2024-07-02T08:58:33.686643745Z" level=info msg="StopPodSandbox for \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\"" Jul 2 08:58:33.688578 env[1136]: time="2024-07-02T08:58:33.688488310Z" level=info msg="StopPodSandbox for \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\"" Jul 2 08:58:33.938657 kubelet[2009]: I0702 08:58:33.938430 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-ntm5v" podStartSLOduration=3.664628338 podStartE2EDuration="24.905278605s" podCreationTimestamp="2024-07-02 08:58:09 +0000 UTC" firstStartedPulling="2024-07-02 08:58:10.891570707 +0000 UTC m=+27.445003154" lastFinishedPulling="2024-07-02 08:58:32.132220974 +0000 UTC m=+48.685653421" observedRunningTime="2024-07-02 08:58:33.248319362 +0000 UTC m=+49.801751889" watchObservedRunningTime="2024-07-02 08:58:33.905278605 +0000 UTC m=+50.458711052" Jul 2 08:58:34.453000 audit[3376]: AVC avc: denied { write } for pid=3376 comm="tee" name="fd" dev="proc" ino=26490 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:58:34.453000 audit[3376]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff5e1df9fa a2=241 a3=1b6 items=1 ppid=3348 pid=3376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:34.459000 audit[3374]: AVC avc: denied { write } for pid=3374 comm="tee" name="fd" dev="proc" ino=26498 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:58:34.459000 audit[3374]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe828019f8 a2=241 a3=1b6 items=1 ppid=3359 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:34.459000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 2 08:58:34.459000 audit: PATH item=0 name="/dev/fd/63" inode=26473 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:58:34.459000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:58:34.453000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 2 08:58:34.453000 audit: PATH item=0 name="/dev/fd/63" inode=26474 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:58:34.453000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:58:34.496000 audit[3396]: AVC avc: denied { write } for pid=3396 comm="tee" name="fd" dev="proc" ino=26519 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:58:34.496000 audit[3396]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff56afc9f8 a2=241 a3=1b6 items=1 ppid=3346 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:34.496000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 2 08:58:34.496000 audit: PATH item=0 name="/dev/fd/63" inode=26505 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:58:34.496000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:58:34.501000 audit[3408]: AVC avc: denied { write } for pid=3408 comm="tee" name="fd" dev="proc" ino=26525 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:58:34.501000 audit[3408]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd7a9769e8 a2=241 a3=1b6 items=1 ppid=3350 pid=3408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:34.501000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 2 08:58:34.501000 audit: PATH item=0 name="/dev/fd/63" inode=26514 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:58:34.501000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:58:34.522000 audit[3419]: AVC avc: denied { write } for pid=3419 comm="tee" name="fd" dev="proc" ino=26533 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:58:34.522000 audit[3419]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe638b99f9 a2=241 a3=1b6 items=1 ppid=3354 pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:34.522000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 2 08:58:34.522000 audit: PATH item=0 name="/dev/fd/63" inode=27076 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:58:34.524000 audit[3421]: AVC avc: denied { write } for pid=3421 comm="tee" name="fd" dev="proc" ino=26537 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:58:34.524000 audit[3421]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe229fe9e9 a2=241 a3=1b6 items=1 ppid=3355 pid=3421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:34.524000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 2 08:58:34.524000 audit: PATH item=0 name="/dev/fd/63" inode=27075 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:58:34.524000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:58:34.525000 audit[3423]: AVC avc: denied { write } for pid=3423 comm="tee" name="fd" dev="proc" ino=26541 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:58:34.525000 audit[3423]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffee3fda9f8 a2=241 a3=1b6 items=1 ppid=3353 pid=3423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:34.525000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 2 08:58:34.525000 audit: PATH item=0 name="/dev/fd/63" inode=27074 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:58:34.525000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:58:34.522000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:58:34.676922 env[1136]: time="2024-07-02T08:58:34.676873253Z" level=info msg="StopPodSandbox for \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\"" Jul 2 08:58:34.684774 env[1136]: 2024-07-02 08:58:33.903 [INFO][3318] k8s.go 608: Cleaning up netns ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:34.684774 env[1136]: 2024-07-02 08:58:33.927 [INFO][3318] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" iface="eth0" netns="/var/run/netns/cni-b14861e1-0992-77c7-c762-fc7c6eea6b4d" Jul 2 08:58:34.684774 env[1136]: 2024-07-02 08:58:33.928 [INFO][3318] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" iface="eth0" netns="/var/run/netns/cni-b14861e1-0992-77c7-c762-fc7c6eea6b4d" Jul 2 08:58:34.684774 env[1136]: 2024-07-02 08:58:33.928 [INFO][3318] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" iface="eth0" netns="/var/run/netns/cni-b14861e1-0992-77c7-c762-fc7c6eea6b4d" Jul 2 08:58:34.684774 env[1136]: 2024-07-02 08:58:33.928 [INFO][3318] k8s.go 615: Releasing IP address(es) ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:34.684774 env[1136]: 2024-07-02 08:58:33.928 [INFO][3318] utils.go 188: Calico CNI releasing IP address ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:34.684774 env[1136]: 2024-07-02 08:58:34.454 [INFO][3330] ipam_plugin.go 411: Releasing address using handleID ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" HandleID="k8s-pod-network.f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:34.684774 env[1136]: 2024-07-02 08:58:34.464 [INFO][3330] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:34.684774 env[1136]: 2024-07-02 08:58:34.464 [INFO][3330] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:34.684774 env[1136]: 2024-07-02 08:58:34.671 [WARNING][3330] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" HandleID="k8s-pod-network.f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:34.684774 env[1136]: 2024-07-02 08:58:34.672 [INFO][3330] ipam_plugin.go 439: Releasing address using workloadID ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" HandleID="k8s-pod-network.f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:34.684774 env[1136]: 2024-07-02 08:58:34.681 [INFO][3330] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:34.684774 env[1136]: 2024-07-02 08:58:34.683 [INFO][3318] k8s.go 621: Teardown processing complete. ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:34.688063 systemd[1]: run-netns-cni\x2db14861e1\x2d0992\x2d77c7\x2dc762\x2dfc7c6eea6b4d.mount: Deactivated successfully. Jul 2 08:58:34.689264 env[1136]: time="2024-07-02T08:58:34.689205151Z" level=info msg="TearDown network for sandbox \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\" successfully" Jul 2 08:58:34.689835 env[1136]: time="2024-07-02T08:58:34.689737782Z" level=info msg="StopPodSandbox for \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\" returns successfully" Jul 2 08:58:34.691404 env[1136]: time="2024-07-02T08:58:34.691374897Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-6w7g4,Uid:ab647899-eb65-46d0-97d7-4d252b79f921,Namespace:kube-system,Attempt:1,}" Jul 2 08:58:34.804737 env[1136]: 2024-07-02 08:58:34.082 [INFO][3319] k8s.go 608: Cleaning up netns ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:34.804737 env[1136]: 2024-07-02 08:58:34.083 [INFO][3319] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" iface="eth0" netns="/var/run/netns/cni-662ec760-7b18-6ff3-7877-55fd92f81684" Jul 2 08:58:34.804737 env[1136]: 2024-07-02 08:58:34.083 [INFO][3319] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" iface="eth0" netns="/var/run/netns/cni-662ec760-7b18-6ff3-7877-55fd92f81684" Jul 2 08:58:34.804737 env[1136]: 2024-07-02 08:58:34.083 [INFO][3319] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" iface="eth0" netns="/var/run/netns/cni-662ec760-7b18-6ff3-7877-55fd92f81684" Jul 2 08:58:34.804737 env[1136]: 2024-07-02 08:58:34.084 [INFO][3319] k8s.go 615: Releasing IP address(es) ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:34.804737 env[1136]: 2024-07-02 08:58:34.084 [INFO][3319] utils.go 188: Calico CNI releasing IP address ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:34.804737 env[1136]: 2024-07-02 08:58:34.454 [INFO][3331] ipam_plugin.go 411: Releasing address using handleID ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" HandleID="k8s-pod-network.62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:34.804737 env[1136]: 2024-07-02 08:58:34.464 [INFO][3331] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:34.804737 env[1136]: 2024-07-02 08:58:34.682 [INFO][3331] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:34.804737 env[1136]: 2024-07-02 08:58:34.723 [WARNING][3331] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" HandleID="k8s-pod-network.62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:34.804737 env[1136]: 2024-07-02 08:58:34.723 [INFO][3331] ipam_plugin.go 439: Releasing address using workloadID ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" HandleID="k8s-pod-network.62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:34.804737 env[1136]: 2024-07-02 08:58:34.801 [INFO][3331] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:34.804737 env[1136]: 2024-07-02 08:58:34.803 [INFO][3319] k8s.go 621: Teardown processing complete. ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:34.808239 systemd[1]: run-netns-cni\x2d662ec760\x2d7b18\x2d6ff3\x2d7877\x2d55fd92f81684.mount: Deactivated successfully. Jul 2 08:58:34.809572 env[1136]: time="2024-07-02T08:58:34.809495141Z" level=info msg="TearDown network for sandbox \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\" successfully" Jul 2 08:58:34.809752 env[1136]: time="2024-07-02T08:58:34.809730433Z" level=info msg="StopPodSandbox for \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\" returns successfully" Jul 2 08:58:34.810859 env[1136]: time="2024-07-02T08:58:34.810834136Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-76df6cdb96-sb9dg,Uid:3e63f945-4c76-4d3c-a7c2-bae61ae4b627,Namespace:calico-system,Attempt:1,}" Jul 2 08:58:35.511000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:35.511000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0027ed480 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:58:35.511000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:58:35.511000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:35.511000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002583f80 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:58:35.511000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:58:35.602700 env[1136]: 2024-07-02 08:58:34.873 [INFO][3443] k8s.go 608: Cleaning up netns ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:35.602700 env[1136]: 2024-07-02 08:58:34.873 [INFO][3443] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" iface="eth0" netns="/var/run/netns/cni-8ab409f8-4133-d5d2-a971-21990d05d954" Jul 2 08:58:35.602700 env[1136]: 2024-07-02 08:58:34.873 [INFO][3443] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" iface="eth0" netns="/var/run/netns/cni-8ab409f8-4133-d5d2-a971-21990d05d954" Jul 2 08:58:35.602700 env[1136]: 2024-07-02 08:58:34.873 [INFO][3443] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" iface="eth0" netns="/var/run/netns/cni-8ab409f8-4133-d5d2-a971-21990d05d954" Jul 2 08:58:35.602700 env[1136]: 2024-07-02 08:58:34.873 [INFO][3443] k8s.go 615: Releasing IP address(es) ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:35.602700 env[1136]: 2024-07-02 08:58:34.873 [INFO][3443] utils.go 188: Calico CNI releasing IP address ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:35.602700 env[1136]: 2024-07-02 08:58:35.581 [INFO][3450] ipam_plugin.go 411: Releasing address using handleID ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" HandleID="k8s-pod-network.69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:35.602700 env[1136]: 2024-07-02 08:58:35.581 [INFO][3450] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:35.602700 env[1136]: 2024-07-02 08:58:35.581 [INFO][3450] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:35.602700 env[1136]: 2024-07-02 08:58:35.589 [WARNING][3450] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" HandleID="k8s-pod-network.69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:35.602700 env[1136]: 2024-07-02 08:58:35.597 [INFO][3450] ipam_plugin.go 439: Releasing address using workloadID ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" HandleID="k8s-pod-network.69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:35.602700 env[1136]: 2024-07-02 08:58:35.599 [INFO][3450] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:35.602700 env[1136]: 2024-07-02 08:58:35.601 [INFO][3443] k8s.go 621: Teardown processing complete. ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:35.609924 env[1136]: time="2024-07-02T08:58:35.606539197Z" level=info msg="TearDown network for sandbox \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\" successfully" Jul 2 08:58:35.609924 env[1136]: time="2024-07-02T08:58:35.606572359Z" level=info msg="StopPodSandbox for \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\" returns successfully" Jul 2 08:58:35.609924 env[1136]: time="2024-07-02T08:58:35.607276142Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-7p8cb,Uid:08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6,Namespace:kube-system,Attempt:1,}" Jul 2 08:58:35.605242 systemd[1]: run-netns-cni\x2d8ab409f8\x2d4133\x2dd5d2\x2da971\x2d21990d05d954.mount: Deactivated successfully. Jul 2 08:58:36.066838 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie3321a8b400: link becomes ready Jul 2 08:58:36.074454 systemd-networkd[969]: calie3321a8b400: Link UP Jul 2 08:58:36.158083 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid94dac8f347: link becomes ready Jul 2 08:58:36.075029 systemd-networkd[969]: calie3321a8b400: Gained carrier Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.738 [INFO][3465] utils.go 100: File /var/lib/calico/mtu does not exist Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.756 [INFO][3465] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0 coredns-76f75df574- kube-system ab647899-eb65-46d0-97d7-4d252b79f921 817 0 2024-07-02 08:57:53 +0000 UTC map[k8s-app:kube-dns pod-template-hash:76f75df574 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-5-e-e1038c2d1d.novalocal coredns-76f75df574-6w7g4 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calie3321a8b400 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" Namespace="kube-system" Pod="coredns-76f75df574-6w7g4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-" Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.756 [INFO][3465] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" Namespace="kube-system" Pod="coredns-76f75df574-6w7g4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.841 [INFO][3498] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" HandleID="k8s-pod-network.8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.865 [INFO][3498] ipam_plugin.go 264: Auto assigning IP ContainerID="8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" HandleID="k8s-pod-network.8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003122a0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-5-e-e1038c2d1d.novalocal", "pod":"coredns-76f75df574-6w7g4", "timestamp":"2024-07-02 08:58:35.841934951 +0000 UTC"}, Hostname:"ci-3510-3-5-e-e1038c2d1d.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.866 [INFO][3498] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.866 [INFO][3498] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.866 [INFO][3498] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-5-e-e1038c2d1d.novalocal' Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.874 [INFO][3498] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.891 [INFO][3498] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.898 [INFO][3498] ipam.go 489: Trying affinity for 192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.905 [INFO][3498] ipam.go 155: Attempting to load block cidr=192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.918 [INFO][3498] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.918 [INFO][3498] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.9.192/26 handle="k8s-pod-network.8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.921 [INFO][3498] ipam.go 1685: Creating new handle: k8s-pod-network.8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5 Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:35.926 [INFO][3498] ipam.go 1203: Writing block in order to claim IPs block=192.168.9.192/26 handle="k8s-pod-network.8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:36.035 [INFO][3498] ipam.go 1216: Successfully claimed IPs: [192.168.9.193/26] block=192.168.9.192/26 handle="k8s-pod-network.8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:36.035 [INFO][3498] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.9.193/26] handle="k8s-pod-network.8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:36.035 [INFO][3498] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:36.158295 env[1136]: 2024-07-02 08:58:36.035 [INFO][3498] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.9.193/26] IPv6=[] ContainerID="8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" HandleID="k8s-pod-network.8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:36.152567 systemd-networkd[969]: calid94dac8f347: Link UP Jul 2 08:58:36.166866 env[1136]: 2024-07-02 08:58:36.037 [INFO][3465] k8s.go 386: Populated endpoint ContainerID="8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" Namespace="kube-system" Pod="coredns-76f75df574-6w7g4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"ab647899-eb65-46d0-97d7-4d252b79f921", ResourceVersion:"817", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 57, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"", Pod:"coredns-76f75df574-6w7g4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.9.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie3321a8b400", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:36.166866 env[1136]: 2024-07-02 08:58:36.037 [INFO][3465] k8s.go 387: Calico CNI using IPs: [192.168.9.193/32] ContainerID="8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" Namespace="kube-system" Pod="coredns-76f75df574-6w7g4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:36.166866 env[1136]: 2024-07-02 08:58:36.037 [INFO][3465] dataplane_linux.go 68: Setting the host side veth name to calie3321a8b400 ContainerID="8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" Namespace="kube-system" Pod="coredns-76f75df574-6w7g4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:36.166866 env[1136]: 2024-07-02 08:58:36.064 [INFO][3465] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" Namespace="kube-system" Pod="coredns-76f75df574-6w7g4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:36.166866 env[1136]: 2024-07-02 08:58:36.066 [INFO][3465] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" Namespace="kube-system" Pod="coredns-76f75df574-6w7g4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"ab647899-eb65-46d0-97d7-4d252b79f921", ResourceVersion:"817", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 57, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5", Pod:"coredns-76f75df574-6w7g4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.9.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie3321a8b400", MAC:"66:a7:f2:15:f7:cd", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:36.166866 env[1136]: 2024-07-02 08:58:36.082 [INFO][3465] k8s.go 500: Wrote updated endpoint to datastore ContainerID="8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5" Namespace="kube-system" Pod="coredns-76f75df574-6w7g4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:36.157035 systemd-networkd[969]: calid94dac8f347: Gained carrier Jul 2 08:58:36.178000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:36.178000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c010e28cc0 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:58:36.178000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:58:36.178000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:36.178000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c010e18960 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:58:36.178000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:58:36.282000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526900 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:36.282000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c010f66420 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:58:36.282000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:58:36.292546 env[1136]: time="2024-07-02T08:58:36.292474825Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:58:36.292759 env[1136]: time="2024-07-02T08:58:36.292730225Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:58:36.292859 env[1136]: time="2024-07-02T08:58:36.292834311Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:58:36.305937 env[1136]: time="2024-07-02T08:58:36.293297431Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5 pid=3565 runtime=io.containerd.runc.v2 Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:35.784 [INFO][3474] utils.go 100: File /var/lib/calico/mtu does not exist Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:35.842 [INFO][3474] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0 calico-kube-controllers-76df6cdb96- calico-system 3e63f945-4c76-4d3c-a7c2-bae61ae4b627 818 0 2024-07-02 08:58:03 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:76df6cdb96 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510-3-5-e-e1038c2d1d.novalocal calico-kube-controllers-76df6cdb96-sb9dg eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calid94dac8f347 [] []}} ContainerID="13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" Namespace="calico-system" Pod="calico-kube-controllers-76df6cdb96-sb9dg" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-" Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:35.842 [INFO][3474] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" Namespace="calico-system" Pod="calico-kube-controllers-76df6cdb96-sb9dg" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:35.940 [INFO][3508] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" HandleID="k8s-pod-network.13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.032 [INFO][3508] ipam_plugin.go 264: Auto assigning IP ContainerID="13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" HandleID="k8s-pod-network.13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001149c0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-5-e-e1038c2d1d.novalocal", "pod":"calico-kube-controllers-76df6cdb96-sb9dg", "timestamp":"2024-07-02 08:58:35.940175943 +0000 UTC"}, Hostname:"ci-3510-3-5-e-e1038c2d1d.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.032 [INFO][3508] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.038 [INFO][3508] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.038 [INFO][3508] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-5-e-e1038c2d1d.novalocal' Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.041 [INFO][3508] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.047 [INFO][3508] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.054 [INFO][3508] ipam.go 489: Trying affinity for 192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.079 [INFO][3508] ipam.go 155: Attempting to load block cidr=192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.127 [INFO][3508] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.127 [INFO][3508] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.9.192/26 handle="k8s-pod-network.13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.131 [INFO][3508] ipam.go 1685: Creating new handle: k8s-pod-network.13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306 Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.136 [INFO][3508] ipam.go 1203: Writing block in order to claim IPs block=192.168.9.192/26 handle="k8s-pod-network.13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.145 [INFO][3508] ipam.go 1216: Successfully claimed IPs: [192.168.9.194/26] block=192.168.9.192/26 handle="k8s-pod-network.13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.145 [INFO][3508] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.9.194/26] handle="k8s-pod-network.13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.145 [INFO][3508] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:36.318546 env[1136]: 2024-07-02 08:58:36.145 [INFO][3508] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.9.194/26] IPv6=[] ContainerID="13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" HandleID="k8s-pod-network.13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:36.326731 env[1136]: 2024-07-02 08:58:36.148 [INFO][3474] k8s.go 386: Populated endpoint ContainerID="13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" Namespace="calico-system" Pod="calico-kube-controllers-76df6cdb96-sb9dg" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0", GenerateName:"calico-kube-controllers-76df6cdb96-", Namespace:"calico-system", SelfLink:"", UID:"3e63f945-4c76-4d3c-a7c2-bae61ae4b627", ResourceVersion:"818", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 58, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"76df6cdb96", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"", Pod:"calico-kube-controllers-76df6cdb96-sb9dg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.9.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid94dac8f347", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:36.326731 env[1136]: 2024-07-02 08:58:36.148 [INFO][3474] k8s.go 387: Calico CNI using IPs: [192.168.9.194/32] ContainerID="13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" Namespace="calico-system" Pod="calico-kube-controllers-76df6cdb96-sb9dg" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:36.326731 env[1136]: 2024-07-02 08:58:36.149 [INFO][3474] dataplane_linux.go 68: Setting the host side veth name to calid94dac8f347 ContainerID="13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" Namespace="calico-system" Pod="calico-kube-controllers-76df6cdb96-sb9dg" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:36.326731 env[1136]: 2024-07-02 08:58:36.157 [INFO][3474] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" Namespace="calico-system" Pod="calico-kube-controllers-76df6cdb96-sb9dg" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:36.326731 env[1136]: 2024-07-02 08:58:36.159 [INFO][3474] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" Namespace="calico-system" Pod="calico-kube-controllers-76df6cdb96-sb9dg" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0", GenerateName:"calico-kube-controllers-76df6cdb96-", Namespace:"calico-system", SelfLink:"", UID:"3e63f945-4c76-4d3c-a7c2-bae61ae4b627", ResourceVersion:"818", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 58, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"76df6cdb96", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306", Pod:"calico-kube-controllers-76df6cdb96-sb9dg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.9.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid94dac8f347", MAC:"36:ab:c0:c3:68:40", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:36.326731 env[1136]: 2024-07-02 08:58:36.317 [INFO][3474] k8s.go 500: Wrote updated endpoint to datastore ContainerID="13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306" Namespace="calico-system" Pod="calico-kube-controllers-76df6cdb96-sb9dg" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:36.332000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=526906 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:36.332000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c011022b70 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:58:36.332000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:58:36.333000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:36.333000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c011050120 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:58:36.333000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:58:36.333000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:36.333000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c011022bd0 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:58:36.333000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:58:36.383930 systemd[1]: Started cri-containerd-8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5.scope. Jul 2 08:58:36.391792 systemd[1]: run-containerd-runc-k8s.io-8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5-runc.1ZMJkx.mount: Deactivated successfully. Jul 2 08:58:36.404414 env[1136]: time="2024-07-02T08:58:36.404351635Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:58:36.404414 env[1136]: time="2024-07-02T08:58:36.404388494Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:58:36.405534 env[1136]: time="2024-07-02T08:58:36.404657289Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:58:36.405534 env[1136]: time="2024-07-02T08:58:36.404779037Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306 pid=3602 runtime=io.containerd.runc.v2 Jul 2 08:58:36.427353 systemd[1]: Started cri-containerd-13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306.scope. Jul 2 08:58:36.440998 systemd-networkd[969]: cali3e9580b9e9c: Link UP Jul 2 08:58:36.442960 systemd-networkd[969]: cali3e9580b9e9c: Gained carrier Jul 2 08:58:36.443673 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3e9580b9e9c: link becomes ready Jul 2 08:58:36.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.451000 audit: BPF prog-id=151 op=LOAD Jul 2 08:58:36.453000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.453000 audit[3576]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3565 pid=3576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862386231343034656565323334316461613538623365326239666362 Jul 2 08:58:36.453000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.453000 audit[3576]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3565 pid=3576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862386231343034656565323334316461613538623365326239666362 Jul 2 08:58:36.453000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.453000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.453000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.453000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.453000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.453000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.453000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.453000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.453000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.453000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.453000 audit: BPF prog-id=152 op=LOAD Jul 2 08:58:36.453000 audit[3576]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003b4a00 items=0 ppid=3565 pid=3576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862386231343034656565323334316461613538623365326239666362 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit: BPF prog-id=153 op=LOAD Jul 2 08:58:36.456000 audit[3576]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003b4a48 items=0 ppid=3565 pid=3576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862386231343034656565323334316461613538623365326239666362 Jul 2 08:58:36.456000 audit: BPF prog-id=153 op=UNLOAD Jul 2 08:58:36.456000 audit: BPF prog-id=152 op=UNLOAD Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { perfmon } for pid=3576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit[3576]: AVC avc: denied { bpf } for pid=3576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.456000 audit: BPF prog-id=154 op=LOAD Jul 2 08:58:36.456000 audit[3576]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003b4e58 items=0 ppid=3565 pid=3576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862386231343034656565323334316461613538623365326239666362 Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:35.851 [INFO][3488] utils.go 100: File /var/lib/calico/mtu does not exist Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:35.887 [INFO][3488] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0 coredns-76f75df574- kube-system 08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6 822 0 2024-07-02 08:57:53 +0000 UTC map[k8s-app:kube-dns pod-template-hash:76f75df574 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-5-e-e1038c2d1d.novalocal coredns-76f75df574-7p8cb eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali3e9580b9e9c [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" Namespace="kube-system" Pod="coredns-76f75df574-7p8cb" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-" Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:35.888 [INFO][3488] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" Namespace="kube-system" Pod="coredns-76f75df574-7p8cb" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:35.983 [INFO][3517] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" HandleID="k8s-pod-network.d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.033 [INFO][3517] ipam_plugin.go 264: Auto assigning IP ContainerID="d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" HandleID="k8s-pod-network.d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002917b0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-5-e-e1038c2d1d.novalocal", "pod":"coredns-76f75df574-7p8cb", "timestamp":"2024-07-02 08:58:35.983001082 +0000 UTC"}, Hostname:"ci-3510-3-5-e-e1038c2d1d.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.034 [INFO][3517] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.146 [INFO][3517] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.146 [INFO][3517] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-5-e-e1038c2d1d.novalocal' Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.159 [INFO][3517] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.193 [INFO][3517] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.313 [INFO][3517] ipam.go 489: Trying affinity for 192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.346 [INFO][3517] ipam.go 155: Attempting to load block cidr=192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.355 [INFO][3517] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.355 [INFO][3517] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.9.192/26 handle="k8s-pod-network.d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.359 [INFO][3517] ipam.go 1685: Creating new handle: k8s-pod-network.d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.408 [INFO][3517] ipam.go 1203: Writing block in order to claim IPs block=192.168.9.192/26 handle="k8s-pod-network.d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.421 [INFO][3517] ipam.go 1216: Successfully claimed IPs: [192.168.9.195/26] block=192.168.9.192/26 handle="k8s-pod-network.d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.421 [INFO][3517] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.9.195/26] handle="k8s-pod-network.d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.421 [INFO][3517] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:36.495711 env[1136]: 2024-07-02 08:58:36.421 [INFO][3517] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.9.195/26] IPv6=[] ContainerID="d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" HandleID="k8s-pod-network.d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:36.496475 env[1136]: 2024-07-02 08:58:36.431 [INFO][3488] k8s.go 386: Populated endpoint ContainerID="d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" Namespace="kube-system" Pod="coredns-76f75df574-7p8cb" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6", ResourceVersion:"822", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 57, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"", Pod:"coredns-76f75df574-7p8cb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.9.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3e9580b9e9c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:36.496475 env[1136]: 2024-07-02 08:58:36.432 [INFO][3488] k8s.go 387: Calico CNI using IPs: [192.168.9.195/32] ContainerID="d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" Namespace="kube-system" Pod="coredns-76f75df574-7p8cb" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:36.496475 env[1136]: 2024-07-02 08:58:36.432 [INFO][3488] dataplane_linux.go 68: Setting the host side veth name to cali3e9580b9e9c ContainerID="d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" Namespace="kube-system" Pod="coredns-76f75df574-7p8cb" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:36.496475 env[1136]: 2024-07-02 08:58:36.444 [INFO][3488] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" Namespace="kube-system" Pod="coredns-76f75df574-7p8cb" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:36.496475 env[1136]: 2024-07-02 08:58:36.444 [INFO][3488] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" Namespace="kube-system" Pod="coredns-76f75df574-7p8cb" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6", ResourceVersion:"822", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 57, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d", Pod:"coredns-76f75df574-7p8cb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.9.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3e9580b9e9c", MAC:"7a:3f:2c:d7:ca:ae", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:36.496475 env[1136]: 2024-07-02 08:58:36.489 [INFO][3488] k8s.go 500: Wrote updated endpoint to datastore ContainerID="d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d" Namespace="kube-system" Pod="coredns-76f75df574-7p8cb" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:36.519168 env[1136]: time="2024-07-02T08:58:36.519113955Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-6w7g4,Uid:ab647899-eb65-46d0-97d7-4d252b79f921,Namespace:kube-system,Attempt:1,} returns sandbox id \"8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5\"" Jul 2 08:58:36.546146 env[1136]: time="2024-07-02T08:58:36.544842033Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:58:36.546146 env[1136]: time="2024-07-02T08:58:36.544882500Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:58:36.546146 env[1136]: time="2024-07-02T08:58:36.544896256Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:58:36.546146 env[1136]: time="2024-07-02T08:58:36.545011382Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d pid=3666 runtime=io.containerd.runc.v2 Jul 2 08:58:36.546362 env[1136]: time="2024-07-02T08:58:36.546307126Z" level=info msg="CreateContainer within sandbox \"8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 08:58:36.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.550000 audit: BPF prog-id=155 op=LOAD Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3602 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133633335353165643466376537643433316665386436316534303639 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3602 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133633335353165643466376537643433316665386436316534303639 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit: BPF prog-id=156 op=LOAD Jul 2 08:58:36.552000 audit[3610]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00040cda0 items=0 ppid=3602 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133633335353165643466376537643433316665386436316534303639 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit: BPF prog-id=157 op=LOAD Jul 2 08:58:36.552000 audit[3610]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00040cde8 items=0 ppid=3602 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133633335353165643466376537643433316665386436316534303639 Jul 2 08:58:36.552000 audit: BPF prog-id=157 op=UNLOAD Jul 2 08:58:36.552000 audit: BPF prog-id=156 op=UNLOAD Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.552000 audit: BPF prog-id=158 op=LOAD Jul 2 08:58:36.552000 audit[3610]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00040d1f8 items=0 ppid=3602 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133633335353165643466376537643433316665386436316534303639 Jul 2 08:58:36.577443 systemd[1]: Started cri-containerd-d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d.scope. Jul 2 08:58:36.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.604000 audit: BPF prog-id=159 op=LOAD Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3666 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436313466373532346639353336353035336131386633666530313431 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3666 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436313466373532346639353336353035336131386633666530313431 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit: BPF prog-id=160 op=LOAD Jul 2 08:58:36.606000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00035be40 items=0 ppid=3666 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436313466373532346639353336353035336131386633666530313431 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit: BPF prog-id=161 op=LOAD Jul 2 08:58:36.606000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00035be88 items=0 ppid=3666 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436313466373532346639353336353035336131386633666530313431 Jul 2 08:58:36.606000 audit: BPF prog-id=161 op=UNLOAD Jul 2 08:58:36.606000 audit: BPF prog-id=160 op=UNLOAD Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.606000 audit: BPF prog-id=162 op=LOAD Jul 2 08:58:36.606000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003da298 items=0 ppid=3666 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436313466373532346639353336353035336131386633666530313431 Jul 2 08:58:36.634107 env[1136]: time="2024-07-02T08:58:36.633979207Z" level=info msg="CreateContainer within sandbox \"8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c1a2899e1dac73f8a62db99f3e0da1f90022b5d72d36b5cdc921cce5c35626ba\"" Jul 2 08:58:36.636567 env[1136]: time="2024-07-02T08:58:36.635920043Z" level=info msg="StartContainer for \"c1a2899e1dac73f8a62db99f3e0da1f90022b5d72d36b5cdc921cce5c35626ba\"" Jul 2 08:58:36.663435 systemd[1]: Started cri-containerd-c1a2899e1dac73f8a62db99f3e0da1f90022b5d72d36b5cdc921cce5c35626ba.scope. Jul 2 08:58:36.669126 env[1136]: time="2024-07-02T08:58:36.669064975Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-7p8cb,Uid:08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6,Namespace:kube-system,Attempt:1,} returns sandbox id \"d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d\"" Jul 2 08:58:36.676224 env[1136]: time="2024-07-02T08:58:36.676155294Z" level=info msg="StopPodSandbox for \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\"" Jul 2 08:58:36.679230 env[1136]: time="2024-07-02T08:58:36.679173563Z" level=info msg="CreateContainer within sandbox \"d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 08:58:36.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.707000 audit: BPF prog-id=163 op=LOAD Jul 2 08:58:36.708000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.708000 audit[3706]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3565 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613238393965316461633733663861363264623939663365306461 Jul 2 08:58:36.709000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.709000 audit[3706]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=3565 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613238393965316461633733663861363264623939663365306461 Jul 2 08:58:36.710000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.710000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.710000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.710000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.710000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.710000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.710000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.710000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.710000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.710000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.710000 audit: BPF prog-id=164 op=LOAD Jul 2 08:58:36.710000 audit[3706]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003a81f0 items=0 ppid=3565 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.710000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613238393965316461633733663861363264623939663365306461 Jul 2 08:58:36.711000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.711000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.711000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.711000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.711000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.711000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.711000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.711000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.711000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.711000 audit: BPF prog-id=165 op=LOAD Jul 2 08:58:36.711000 audit[3706]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003a8238 items=0 ppid=3565 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613238393965316461633733663861363264623939663365306461 Jul 2 08:58:36.712000 audit: BPF prog-id=165 op=UNLOAD Jul 2 08:58:36.712000 audit: BPF prog-id=164 op=UNLOAD Jul 2 08:58:36.712000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.712000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.712000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.712000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.712000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.712000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.712000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.712000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.712000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.712000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.712000 audit: BPF prog-id=166 op=LOAD Jul 2 08:58:36.712000 audit[3706]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003a8648 items=0 ppid=3565 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613238393965316461633733663861363264623939663365306461 Jul 2 08:58:36.753247 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3762365208.mount: Deactivated successfully. Jul 2 08:58:36.769722 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3734261778.mount: Deactivated successfully. Jul 2 08:58:36.780954 env[1136]: time="2024-07-02T08:58:36.780833670Z" level=info msg="CreateContainer within sandbox \"d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"59c549e459e7f79c7969bec46f7e4df9f74389890ab3f4fa367d1fb57d4c209f\"" Jul 2 08:58:36.783502 env[1136]: time="2024-07-02T08:58:36.783467879Z" level=info msg="StartContainer for \"59c549e459e7f79c7969bec46f7e4df9f74389890ab3f4fa367d1fb57d4c209f\"" Jul 2 08:58:36.788329 env[1136]: time="2024-07-02T08:58:36.788292412Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-76df6cdb96-sb9dg,Uid:3e63f945-4c76-4d3c-a7c2-bae61ae4b627,Namespace:calico-system,Attempt:1,} returns sandbox id \"13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306\"" Jul 2 08:58:36.806642 env[1136]: time="2024-07-02T08:58:36.806202936Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\"" Jul 2 08:58:36.814120 env[1136]: time="2024-07-02T08:58:36.813677097Z" level=info msg="StartContainer for \"c1a2899e1dac73f8a62db99f3e0da1f90022b5d72d36b5cdc921cce5c35626ba\" returns successfully" Jul 2 08:58:36.854883 systemd[1]: Started cri-containerd-59c549e459e7f79c7969bec46f7e4df9f74389890ab3f4fa367d1fb57d4c209f.scope. Jul 2 08:58:36.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.909000 audit: BPF prog-id=167 op=LOAD Jul 2 08:58:36.910000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.910000 audit[3778]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3666 pid=3778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539633534396534353965376637396337393639626563343666376534 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3666 pid=3778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539633534396534353965376637396337393639626563343666376534 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit: BPF prog-id=168 op=LOAD Jul 2 08:58:36.911000 audit[3778]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025490 items=0 ppid=3666 pid=3778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539633534396534353965376637396337393639626563343666376534 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.911000 audit: BPF prog-id=169 op=LOAD Jul 2 08:58:36.911000 audit[3778]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000254d8 items=0 ppid=3666 pid=3778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539633534396534353965376637396337393639626563343666376534 Jul 2 08:58:36.915000 audit: BPF prog-id=169 op=UNLOAD Jul 2 08:58:36.915000 audit: BPF prog-id=168 op=UNLOAD Jul 2 08:58:36.915000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.915000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.915000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.915000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.915000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.915000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.915000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.915000 audit[3778]: AVC avc: denied { perfmon } for pid=3778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.915000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.915000 audit[3778]: AVC avc: denied { bpf } for pid=3778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:36.915000 audit: BPF prog-id=170 op=LOAD Jul 2 08:58:36.915000 audit[3778]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000258e8 items=0 ppid=3666 pid=3778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:36.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539633534396534353965376637396337393639626563343666376534 Jul 2 08:58:36.970133 env[1136]: time="2024-07-02T08:58:36.970072153Z" level=info msg="StartContainer for \"59c549e459e7f79c7969bec46f7e4df9f74389890ab3f4fa367d1fb57d4c209f\" returns successfully" Jul 2 08:58:37.049016 env[1136]: 2024-07-02 08:58:36.967 [INFO][3766] k8s.go 608: Cleaning up netns ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:37.049016 env[1136]: 2024-07-02 08:58:36.967 [INFO][3766] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" iface="eth0" netns="/var/run/netns/cni-8faf020f-ac72-081e-2989-68d4c819d9e2" Jul 2 08:58:37.049016 env[1136]: 2024-07-02 08:58:36.967 [INFO][3766] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" iface="eth0" netns="/var/run/netns/cni-8faf020f-ac72-081e-2989-68d4c819d9e2" Jul 2 08:58:37.049016 env[1136]: 2024-07-02 08:58:36.967 [INFO][3766] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" iface="eth0" netns="/var/run/netns/cni-8faf020f-ac72-081e-2989-68d4c819d9e2" Jul 2 08:58:37.049016 env[1136]: 2024-07-02 08:58:36.968 [INFO][3766] k8s.go 615: Releasing IP address(es) ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:37.049016 env[1136]: 2024-07-02 08:58:36.968 [INFO][3766] utils.go 188: Calico CNI releasing IP address ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:37.049016 env[1136]: 2024-07-02 08:58:37.015 [INFO][3805] ipam_plugin.go 411: Releasing address using handleID ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" HandleID="k8s-pod-network.10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:37.049016 env[1136]: 2024-07-02 08:58:37.015 [INFO][3805] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:37.049016 env[1136]: 2024-07-02 08:58:37.016 [INFO][3805] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:37.049016 env[1136]: 2024-07-02 08:58:37.037 [WARNING][3805] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" HandleID="k8s-pod-network.10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:37.049016 env[1136]: 2024-07-02 08:58:37.037 [INFO][3805] ipam_plugin.go 439: Releasing address using workloadID ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" HandleID="k8s-pod-network.10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:37.049016 env[1136]: 2024-07-02 08:58:37.043 [INFO][3805] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:37.049016 env[1136]: 2024-07-02 08:58:37.045 [INFO][3766] k8s.go 621: Teardown processing complete. ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:37.049779 env[1136]: time="2024-07-02T08:58:37.049746427Z" level=info msg="TearDown network for sandbox \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\" successfully" Jul 2 08:58:37.050321 env[1136]: time="2024-07-02T08:58:37.049872543Z" level=info msg="StopPodSandbox for \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\" returns successfully" Jul 2 08:58:37.050852 env[1136]: time="2024-07-02T08:58:37.050805336Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-jqbj5,Uid:6f72bbc2-6c33-4033-bc07-2e6f5f55f594,Namespace:calico-system,Attempt:1,}" Jul 2 08:58:37.066182 kubelet[2009]: I0702 08:58:37.066126 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-76f75df574-6w7g4" podStartSLOduration=44.066069958 podStartE2EDuration="44.066069958s" podCreationTimestamp="2024-07-02 08:57:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 08:58:37.040339005 +0000 UTC m=+53.593771442" watchObservedRunningTime="2024-07-02 08:58:37.066069958 +0000 UTC m=+53.619502395" Jul 2 08:58:37.086000 audit[3820]: NETFILTER_CFG table=filter:103 family=2 entries=14 op=nft_register_rule pid=3820 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:37.086000 audit[3820]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7fff99ec9990 a2=0 a3=7fff99ec997c items=0 ppid=2142 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.086000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:37.101000 audit[3820]: NETFILTER_CFG table=nat:104 family=2 entries=14 op=nft_register_rule pid=3820 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:37.101000 audit[3820]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7fff99ec9990 a2=0 a3=0 items=0 ppid=2142 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.101000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:37.145000 audit[3835]: NETFILTER_CFG table=filter:105 family=2 entries=14 op=nft_register_rule pid=3835 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:37.148347 systemd-networkd[969]: vxlan.calico: Link UP Jul 2 08:58:37.148357 systemd-networkd[969]: vxlan.calico: Gained carrier Jul 2 08:58:37.145000 audit[3835]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffc0ef90490 a2=0 a3=7ffc0ef9047c items=0 ppid=2142 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.145000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:37.152000 audit[3835]: NETFILTER_CFG table=nat:106 family=2 entries=14 op=nft_register_rule pid=3835 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:37.152000 audit[3835]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc0ef90490 a2=0 a3=0 items=0 ppid=2142 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.152000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:37.193000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.193000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.193000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.193000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.193000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.193000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.193000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.193000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.193000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.193000 audit: BPF prog-id=171 op=LOAD Jul 2 08:58:37.193000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff38295af0 a2=70 a3=7efe583f2000 items=0 ppid=3347 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.193000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:58:37.194000 audit: BPF prog-id=171 op=UNLOAD Jul 2 08:58:37.194000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.194000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.194000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.194000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.194000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.194000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.194000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.194000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.194000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.194000 audit: BPF prog-id=172 op=LOAD Jul 2 08:58:37.194000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff38295af0 a2=70 a3=6f items=0 ppid=3347 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.194000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:58:37.195000 audit: BPF prog-id=172 op=UNLOAD Jul 2 08:58:37.195000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.195000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff38295aa0 a2=70 a3=470860 items=0 ppid=3347 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.195000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:58:37.195000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.195000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.195000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.195000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.195000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.195000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.195000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.195000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.195000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.195000 audit: BPF prog-id=173 op=LOAD Jul 2 08:58:37.195000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff38295a80 a2=70 a3=7fff38295af0 items=0 ppid=3347 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.195000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:58:37.195000 audit: BPF prog-id=173 op=UNLOAD Jul 2 08:58:37.195000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.195000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff38295b60 a2=70 a3=0 items=0 ppid=3347 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.195000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:58:37.195000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.195000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff38295b50 a2=70 a3=0 items=0 ppid=3347 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.195000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:58:37.195000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.195000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff38295ac0 a2=70 a3=0 items=0 ppid=3347 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.195000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:58:37.197000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.197000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff38295b90 a2=70 a3=fe00 items=0 ppid=3347 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.197000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:58:37.197000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.197000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff38295b90 a2=70 a3=fe00 items=0 ppid=3347 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.197000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:58:37.197000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.197000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.197000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.197000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.197000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.197000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.197000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.197000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.197000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.197000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.197000 audit: BPF prog-id=174 op=LOAD Jul 2 08:58:37.197000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff38295ab0 a2=70 a3=0 items=0 ppid=3347 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.197000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:58:37.204000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.204000 audit[3853]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffcc685870 a2=70 a3=ffff items=0 ppid=3347 pid=3853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.204000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 08:58:37.205000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.205000 audit[3853]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffcc685740 a2=70 a3=3 items=0 ppid=3347 pid=3853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.205000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 08:58:37.231000 audit: BPF prog-id=174 op=UNLOAD Jul 2 08:58:37.367536 systemd-networkd[969]: calid94dac8f347: Gained IPv6LL Jul 2 08:58:37.367818 systemd-networkd[969]: calie3321a8b400: Gained IPv6LL Jul 2 08:58:37.370038 systemd-networkd[969]: cali05bb121d81b: Link UP Jul 2 08:58:37.370355 systemd-networkd[969]: cali05bb121d81b: Gained carrier Jul 2 08:58:37.370654 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali05bb121d81b: link becomes ready Jul 2 08:58:37.391099 kubelet[2009]: I0702 08:58:37.391054 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-76f75df574-7p8cb" podStartSLOduration=44.390974986 podStartE2EDuration="44.390974986s" podCreationTimestamp="2024-07-02 08:57:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 08:58:37.067200622 +0000 UTC m=+53.620633059" watchObservedRunningTime="2024-07-02 08:58:37.390974986 +0000 UTC m=+53.944407423" Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.179 [INFO][3822] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0 csi-node-driver- calico-system 6f72bbc2-6c33-4033-bc07-2e6f5f55f594 842 0 2024-07-02 08:58:02 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:7d7f6c786c k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ci-3510-3-5-e-e1038c2d1d.novalocal csi-node-driver-jqbj5 eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali05bb121d81b [] []}} ContainerID="31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" Namespace="calico-system" Pod="csi-node-driver-jqbj5" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-" Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.179 [INFO][3822] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" Namespace="calico-system" Pod="csi-node-driver-jqbj5" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.273 [INFO][3851] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" HandleID="k8s-pod-network.31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.287 [INFO][3851] ipam_plugin.go 264: Auto assigning IP ContainerID="31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" HandleID="k8s-pod-network.31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003be550), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-5-e-e1038c2d1d.novalocal", "pod":"csi-node-driver-jqbj5", "timestamp":"2024-07-02 08:58:37.273052668 +0000 UTC"}, Hostname:"ci-3510-3-5-e-e1038c2d1d.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.287 [INFO][3851] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.287 [INFO][3851] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.288 [INFO][3851] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-5-e-e1038c2d1d.novalocal' Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.292 [INFO][3851] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.305 [INFO][3851] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.330 [INFO][3851] ipam.go 489: Trying affinity for 192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.333 [INFO][3851] ipam.go 155: Attempting to load block cidr=192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.344 [INFO][3851] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.344 [INFO][3851] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.9.192/26 handle="k8s-pod-network.31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.347 [INFO][3851] ipam.go 1685: Creating new handle: k8s-pod-network.31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85 Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.354 [INFO][3851] ipam.go 1203: Writing block in order to claim IPs block=192.168.9.192/26 handle="k8s-pod-network.31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.361 [INFO][3851] ipam.go 1216: Successfully claimed IPs: [192.168.9.196/26] block=192.168.9.192/26 handle="k8s-pod-network.31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.362 [INFO][3851] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.9.196/26] handle="k8s-pod-network.31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.362 [INFO][3851] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:37.394251 env[1136]: 2024-07-02 08:58:37.362 [INFO][3851] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.9.196/26] IPv6=[] ContainerID="31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" HandleID="k8s-pod-network.31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:37.395206 env[1136]: 2024-07-02 08:58:37.364 [INFO][3822] k8s.go 386: Populated endpoint ContainerID="31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" Namespace="calico-system" Pod="csi-node-driver-jqbj5" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"6f72bbc2-6c33-4033-bc07-2e6f5f55f594", ResourceVersion:"842", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 58, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"", Pod:"csi-node-driver-jqbj5", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.9.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali05bb121d81b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:37.395206 env[1136]: 2024-07-02 08:58:37.364 [INFO][3822] k8s.go 387: Calico CNI using IPs: [192.168.9.196/32] ContainerID="31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" Namespace="calico-system" Pod="csi-node-driver-jqbj5" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:37.395206 env[1136]: 2024-07-02 08:58:37.364 [INFO][3822] dataplane_linux.go 68: Setting the host side veth name to cali05bb121d81b ContainerID="31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" Namespace="calico-system" Pod="csi-node-driver-jqbj5" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:37.395206 env[1136]: 2024-07-02 08:58:37.370 [INFO][3822] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" Namespace="calico-system" Pod="csi-node-driver-jqbj5" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:37.395206 env[1136]: 2024-07-02 08:58:37.377 [INFO][3822] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" Namespace="calico-system" Pod="csi-node-driver-jqbj5" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"6f72bbc2-6c33-4033-bc07-2e6f5f55f594", ResourceVersion:"842", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 58, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85", Pod:"csi-node-driver-jqbj5", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.9.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali05bb121d81b", MAC:"86:c2:9b:45:e3:ef", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:37.395206 env[1136]: 2024-07-02 08:58:37.392 [INFO][3822] k8s.go 500: Wrote updated endpoint to datastore ContainerID="31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85" Namespace="calico-system" Pod="csi-node-driver-jqbj5" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:37.413915 env[1136]: time="2024-07-02T08:58:37.413783118Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:58:37.413915 env[1136]: time="2024-07-02T08:58:37.413860394Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:58:37.417314 env[1136]: time="2024-07-02T08:58:37.413892334Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:58:37.417499 env[1136]: time="2024-07-02T08:58:37.417457080Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85 pid=3900 runtime=io.containerd.runc.v2 Jul 2 08:58:37.437793 systemd[1]: Started cri-containerd-31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85.scope. Jul 2 08:58:37.468000 audit[3909]: NETFILTER_CFG table=raw:107 family=2 entries=19 op=nft_register_chain pid=3909 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:58:37.470774 kernel: kauditd_printk_skb: 466 callbacks suppressed Jul 2 08:58:37.470846 kernel: audit: type=1325 audit(1719910717.468:1207): table=raw:107 family=2 entries=19 op=nft_register_chain pid=3909 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:58:37.487000 audit[3916]: NETFILTER_CFG table=nat:108 family=2 entries=15 op=nft_register_chain pid=3916 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:58:37.487000 audit[3916]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fff01899d70 a2=0 a3=7fff01899d5c items=0 ppid=3347 pid=3916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.495891 kernel: audit: type=1325 audit(1719910717.487:1208): table=nat:108 family=2 entries=15 op=nft_register_chain pid=3916 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:58:37.496083 kernel: audit: type=1300 audit(1719910717.487:1208): arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fff01899d70 a2=0 a3=7fff01899d5c items=0 ppid=3347 pid=3916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.496217 kernel: audit: type=1327 audit(1719910717.487:1208): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:58:37.487000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:58:37.468000 audit[3909]: SYSCALL arch=c000003e syscall=46 success=yes exit=6992 a0=3 a1=7ffdb4a29870 a2=0 a3=7ffdb4a2985c items=0 ppid=3347 pid=3909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.506633 kernel: audit: type=1300 audit(1719910717.468:1207): arch=c000003e syscall=46 success=yes exit=6992 a0=3 a1=7ffdb4a29870 a2=0 a3=7ffdb4a2985c items=0 ppid=3347 pid=3909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.468000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:58:37.510630 kernel: audit: type=1327 audit(1719910717.468:1207): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:58:37.510724 kernel: audit: type=1325 audit(1719910717.504:1209): table=mangle:109 family=2 entries=16 op=nft_register_chain pid=3917 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:58:37.504000 audit[3917]: NETFILTER_CFG table=mangle:109 family=2 entries=16 op=nft_register_chain pid=3917 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:58:37.504000 audit[3917]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fffb17ed310 a2=0 a3=7fffb17ed2fc items=0 ppid=3347 pid=3917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.519788 kernel: audit: type=1300 audit(1719910717.504:1209): arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fffb17ed310 a2=0 a3=7fffb17ed2fc items=0 ppid=3347 pid=3917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.504000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:58:37.523505 kernel: audit: type=1327 audit(1719910717.504:1209): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:58:37.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.563699 kernel: audit: type=1400 audit(1719910717.557:1210): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.558000 audit: BPF prog-id=175 op=LOAD Jul 2 08:58:37.564000 audit[3926]: NETFILTER_CFG table=filter:110 family=2 entries=121 op=nft_register_chain pid=3926 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:58:37.564000 audit[3926]: SYSCALL arch=c000003e syscall=46 success=yes exit=67972 a0=3 a1=7ffde7c072d0 a2=0 a3=7ffde7c072bc items=0 ppid=3347 pid=3926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.564000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:58:37.568000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.568000 audit[3910]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3900 pid=3910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331633635636163623261306436343464323437643639363033326438 Jul 2 08:58:37.568000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.568000 audit[3910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=3900 pid=3910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331633635636163623261306436343464323437643639363033326438 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit: BPF prog-id=176 op=LOAD Jul 2 08:58:37.569000 audit[3910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000329d10 items=0 ppid=3900 pid=3910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331633635636163623261306436343464323437643639363033326438 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.569000 audit: BPF prog-id=177 op=LOAD Jul 2 08:58:37.569000 audit[3910]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000329d58 items=0 ppid=3900 pid=3910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331633635636163623261306436343464323437643639363033326438 Jul 2 08:58:37.570000 audit: BPF prog-id=177 op=UNLOAD Jul 2 08:58:37.570000 audit: BPF prog-id=176 op=UNLOAD Jul 2 08:58:37.570000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.570000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.570000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.570000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.570000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.570000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.570000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.570000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.570000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.570000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:37.570000 audit: BPF prog-id=178 op=LOAD Jul 2 08:58:37.570000 audit[3910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c00037c168 items=0 ppid=3900 pid=3910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331633635636163623261306436343464323437643639363033326438 Jul 2 08:58:37.601832 env[1136]: time="2024-07-02T08:58:37.601748156Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-jqbj5,Uid:6f72bbc2-6c33-4033-bc07-2e6f5f55f594,Namespace:calico-system,Attempt:1,} returns sandbox id \"31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85\"" Jul 2 08:58:37.632000 audit[3949]: NETFILTER_CFG table=filter:111 family=2 entries=42 op=nft_register_chain pid=3949 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:58:37.632000 audit[3949]: SYSCALL arch=c000003e syscall=46 success=yes exit=21016 a0=3 a1=7ffd3c057930 a2=0 a3=7ffd3c05791c items=0 ppid=3347 pid=3949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:37.632000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:58:37.714060 systemd[1]: run-netns-cni\x2d8faf020f\x2dac72\x2d081e\x2d2989\x2d68d4c819d9e2.mount: Deactivated successfully. Jul 2 08:58:38.150865 systemd-networkd[969]: cali3e9580b9e9c: Gained IPv6LL Jul 2 08:58:38.385000 audit[3957]: NETFILTER_CFG table=filter:112 family=2 entries=11 op=nft_register_rule pid=3957 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:38.385000 audit[3957]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffffbed5650 a2=0 a3=7ffffbed563c items=0 ppid=2142 pid=3957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:38.385000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:38.389000 audit[3957]: NETFILTER_CFG table=nat:113 family=2 entries=35 op=nft_register_chain pid=3957 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:38.389000 audit[3957]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffffbed5650 a2=0 a3=7ffffbed563c items=0 ppid=2142 pid=3957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:38.389000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:38.516781 systemd-networkd[969]: vxlan.calico: Gained IPv6LL Jul 2 08:58:38.580853 systemd-networkd[969]: cali05bb121d81b: Gained IPv6LL Jul 2 08:58:39.570000 audit[3960]: NETFILTER_CFG table=filter:114 family=2 entries=8 op=nft_register_rule pid=3960 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:39.570000 audit[3960]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffcb484b740 a2=0 a3=7ffcb484b72c items=0 ppid=2142 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:39.570000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:39.659000 audit[3960]: NETFILTER_CFG table=nat:115 family=2 entries=56 op=nft_register_chain pid=3960 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:39.659000 audit[3960]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffcb484b740 a2=0 a3=7ffcb484b72c items=0 ppid=2142 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:39.659000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:41.496601 env[1136]: time="2024-07-02T08:58:41.496425345Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:41.500224 env[1136]: time="2024-07-02T08:58:41.500145032Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:428d92b02253980b402b9fb18f4cb58be36dc6bcf4893e07462732cb926ea783,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:41.503418 env[1136]: time="2024-07-02T08:58:41.503376361Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:41.506537 env[1136]: time="2024-07-02T08:58:41.506498264Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:c35e88abef622483409fff52313bf764a75095197be4c5a7c7830da342654de1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:41.508210 env[1136]: time="2024-07-02T08:58:41.508029340Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\" returns image reference \"sha256:428d92b02253980b402b9fb18f4cb58be36dc6bcf4893e07462732cb926ea783\"" Jul 2 08:58:41.511518 env[1136]: time="2024-07-02T08:58:41.509695048Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\"" Jul 2 08:58:41.589651 env[1136]: time="2024-07-02T08:58:41.589283258Z" level=info msg="CreateContainer within sandbox \"13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 2 08:58:41.616129 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount471800695.mount: Deactivated successfully. Jul 2 08:58:41.617495 env[1136]: time="2024-07-02T08:58:41.617074134Z" level=info msg="CreateContainer within sandbox \"13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"24660212a94d3873722f38fdef8c9ed9f91a8a3f01cdf97572b7a3bd2cdbcca0\"" Jul 2 08:58:41.619649 env[1136]: time="2024-07-02T08:58:41.618115410Z" level=info msg="StartContainer for \"24660212a94d3873722f38fdef8c9ed9f91a8a3f01cdf97572b7a3bd2cdbcca0\"" Jul 2 08:58:41.649604 systemd[1]: Started cri-containerd-24660212a94d3873722f38fdef8c9ed9f91a8a3f01cdf97572b7a3bd2cdbcca0.scope. Jul 2 08:58:41.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.675000 audit: BPF prog-id=179 op=LOAD Jul 2 08:58:41.680000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.680000 audit[3973]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3602 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:41.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234363630323132613934643338373337323266333866646566386339 Jul 2 08:58:41.680000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.680000 audit[3973]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3602 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:41.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234363630323132613934643338373337323266333866646566386339 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit: BPF prog-id=180 op=LOAD Jul 2 08:58:41.681000 audit[3973]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00025b910 items=0 ppid=3602 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:41.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234363630323132613934643338373337323266333866646566386339 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.681000 audit: BPF prog-id=181 op=LOAD Jul 2 08:58:41.681000 audit[3973]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00025b958 items=0 ppid=3602 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:41.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234363630323132613934643338373337323266333866646566386339 Jul 2 08:58:41.682000 audit: BPF prog-id=181 op=UNLOAD Jul 2 08:58:41.682000 audit: BPF prog-id=180 op=UNLOAD Jul 2 08:58:41.682000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.682000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.682000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.682000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.682000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.682000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.682000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.682000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.682000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.682000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:41.682000 audit: BPF prog-id=182 op=LOAD Jul 2 08:58:41.682000 audit[3973]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00025bd68 items=0 ppid=3602 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:41.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234363630323132613934643338373337323266333866646566386339 Jul 2 08:58:42.015334 env[1136]: time="2024-07-02T08:58:42.015219845Z" level=info msg="StartContainer for \"24660212a94d3873722f38fdef8c9ed9f91a8a3f01cdf97572b7a3bd2cdbcca0\" returns successfully" Jul 2 08:58:43.130959 systemd[1]: run-containerd-runc-k8s.io-24660212a94d3873722f38fdef8c9ed9f91a8a3f01cdf97572b7a3bd2cdbcca0-runc.37821D.mount: Deactivated successfully. Jul 2 08:58:43.210860 kubelet[2009]: I0702 08:58:43.210815 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-76df6cdb96-sb9dg" podStartSLOduration=35.506387105 podStartE2EDuration="40.210757987s" podCreationTimestamp="2024-07-02 08:58:03 +0000 UTC" firstStartedPulling="2024-07-02 08:58:36.80434163 +0000 UTC m=+53.357774078" lastFinishedPulling="2024-07-02 08:58:41.508712493 +0000 UTC m=+58.062144960" observedRunningTime="2024-07-02 08:58:42.186774231 +0000 UTC m=+58.740206668" watchObservedRunningTime="2024-07-02 08:58:43.210757987 +0000 UTC m=+59.764190425" Jul 2 08:58:43.601300 env[1136]: time="2024-07-02T08:58:43.600678837Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:43.603653 env[1136]: time="2024-07-02T08:58:43.603551152Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1a094aeaf1521e225668c83cbf63c0ec63afbdb8c4dd7c3d2aab0ec917d103de,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:43.607827 env[1136]: time="2024-07-02T08:58:43.607777909Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:43.614989 env[1136]: time="2024-07-02T08:58:43.614934951Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:ac5f0089ad8eab325e5d16a59536f9292619adf16736b1554a439a66d543a63d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:43.618909 env[1136]: time="2024-07-02T08:58:43.617282971Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\" returns image reference \"sha256:1a094aeaf1521e225668c83cbf63c0ec63afbdb8c4dd7c3d2aab0ec917d103de\"" Jul 2 08:58:43.692077 env[1136]: time="2024-07-02T08:58:43.691996105Z" level=info msg="CreateContainer within sandbox \"31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 2 08:58:43.713080 env[1136]: time="2024-07-02T08:58:43.713012064Z" level=info msg="StopPodSandbox for \"93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b\"" Jul 2 08:58:43.714010 env[1136]: time="2024-07-02T08:58:43.713680721Z" level=info msg="TearDown network for sandbox \"93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b\" successfully" Jul 2 08:58:43.714504 env[1136]: time="2024-07-02T08:58:43.714455596Z" level=info msg="StopPodSandbox for \"93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b\" returns successfully" Jul 2 08:58:43.717358 env[1136]: time="2024-07-02T08:58:43.717302452Z" level=info msg="RemovePodSandbox for \"93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b\"" Jul 2 08:58:43.717878 env[1136]: time="2024-07-02T08:58:43.717794596Z" level=info msg="Forcibly stopping sandbox \"93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b\"" Jul 2 08:58:43.718847 env[1136]: time="2024-07-02T08:58:43.718795045Z" level=info msg="TearDown network for sandbox \"93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b\" successfully" Jul 2 08:58:43.729844 env[1136]: time="2024-07-02T08:58:43.729778333Z" level=info msg="RemovePodSandbox \"93eb5e68412401b2a98aed69cb8badeb4c0ecfbbe1cb10ab553d85c93a3d379b\" returns successfully" Jul 2 08:58:43.731226 env[1136]: time="2024-07-02T08:58:43.731179012Z" level=info msg="StopPodSandbox for \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\"" Jul 2 08:58:43.757041 env[1136]: time="2024-07-02T08:58:43.756209551Z" level=info msg="CreateContainer within sandbox \"31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"a7758e5f6434a99a5251f317ee9d4cbfe9090e6dd8baac0186a58f38133c5d43\"" Jul 2 08:58:43.773190 env[1136]: time="2024-07-02T08:58:43.769993127Z" level=info msg="StartContainer for \"a7758e5f6434a99a5251f317ee9d4cbfe9090e6dd8baac0186a58f38133c5d43\"" Jul 2 08:58:43.840759 systemd[1]: Started cri-containerd-a7758e5f6434a99a5251f317ee9d4cbfe9090e6dd8baac0186a58f38133c5d43.scope. Jul 2 08:58:43.865374 kernel: kauditd_printk_skb: 131 callbacks suppressed Jul 2 08:58:43.865499 kernel: audit: type=1400 audit(1719910723.859:1252): avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.859000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.859000 audit[4075]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=7fb7b7fc2fd8 items=0 ppid=3900 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:43.872609 kernel: audit: type=1300 audit(1719910723.859:1252): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=7fb7b7fc2fd8 items=0 ppid=3900 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:43.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373538653566363433346139396135323531663331376565396434 Jul 2 08:58:43.881620 kernel: audit: type=1327 audit(1719910723.859:1252): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373538653566363433346139396135323531663331376565396434 Jul 2 08:58:43.871000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.890619 kernel: audit: type=1400 audit(1719910723.871:1253): avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.871000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.899661 kernel: audit: type=1400 audit(1719910723.871:1253): avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.871000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.871000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.910147 kernel: audit: type=1400 audit(1719910723.871:1253): avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.910212 kernel: audit: type=1400 audit(1719910723.871:1253): avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.871000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.916135 kernel: audit: type=1400 audit(1719910723.871:1253): avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.871000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.924662 kernel: audit: type=1400 audit(1719910723.871:1253): avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.871000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.929708 kernel: audit: type=1400 audit(1719910723.871:1253): avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.871000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.871000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.871000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.871000 audit: BPF prog-id=183 op=LOAD Jul 2 08:58:43.871000 audit[4075]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c59d8 a2=78 a3=c00011b3d8 items=0 ppid=3900 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:43.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373538653566363433346139396135323531663331376565396434 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit: BPF prog-id=184 op=LOAD Jul 2 08:58:43.873000 audit[4075]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c5770 a2=78 a3=c00011b428 items=0 ppid=3900 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:43.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373538653566363433346139396135323531663331376565396434 Jul 2 08:58:43.873000 audit: BPF prog-id=184 op=UNLOAD Jul 2 08:58:43.873000 audit: BPF prog-id=183 op=UNLOAD Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:43.873000 audit: BPF prog-id=185 op=LOAD Jul 2 08:58:43.873000 audit[4075]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c5c30 a2=78 a3=c00011b4b8 items=0 ppid=3900 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:43.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373538653566363433346139396135323531663331376565396434 Jul 2 08:58:43.935918 env[1136]: time="2024-07-02T08:58:43.935855534Z" level=info msg="StartContainer for \"a7758e5f6434a99a5251f317ee9d4cbfe9090e6dd8baac0186a58f38133c5d43\" returns successfully" Jul 2 08:58:43.940418 env[1136]: time="2024-07-02T08:58:43.939811885Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\"" Jul 2 08:58:43.947315 env[1136]: 2024-07-02 08:58:43.849 [WARNING][4064] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0", GenerateName:"calico-kube-controllers-76df6cdb96-", Namespace:"calico-system", SelfLink:"", UID:"3e63f945-4c76-4d3c-a7c2-bae61ae4b627", ResourceVersion:"887", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 58, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"76df6cdb96", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306", Pod:"calico-kube-controllers-76df6cdb96-sb9dg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.9.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid94dac8f347", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:43.947315 env[1136]: 2024-07-02 08:58:43.849 [INFO][4064] k8s.go 608: Cleaning up netns ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:43.947315 env[1136]: 2024-07-02 08:58:43.849 [INFO][4064] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" iface="eth0" netns="" Jul 2 08:58:43.947315 env[1136]: 2024-07-02 08:58:43.849 [INFO][4064] k8s.go 615: Releasing IP address(es) ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:43.947315 env[1136]: 2024-07-02 08:58:43.849 [INFO][4064] utils.go 188: Calico CNI releasing IP address ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:43.947315 env[1136]: 2024-07-02 08:58:43.924 [INFO][4093] ipam_plugin.go 411: Releasing address using handleID ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" HandleID="k8s-pod-network.62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:43.947315 env[1136]: 2024-07-02 08:58:43.925 [INFO][4093] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:43.947315 env[1136]: 2024-07-02 08:58:43.925 [INFO][4093] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:43.947315 env[1136]: 2024-07-02 08:58:43.934 [WARNING][4093] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" HandleID="k8s-pod-network.62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:43.947315 env[1136]: 2024-07-02 08:58:43.934 [INFO][4093] ipam_plugin.go 439: Releasing address using workloadID ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" HandleID="k8s-pod-network.62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:43.947315 env[1136]: 2024-07-02 08:58:43.937 [INFO][4093] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:43.947315 env[1136]: 2024-07-02 08:58:43.945 [INFO][4064] k8s.go 621: Teardown processing complete. ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:43.948010 env[1136]: time="2024-07-02T08:58:43.947980185Z" level=info msg="TearDown network for sandbox \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\" successfully" Jul 2 08:58:43.948091 env[1136]: time="2024-07-02T08:58:43.948072539Z" level=info msg="StopPodSandbox for \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\" returns successfully" Jul 2 08:58:43.948625 env[1136]: time="2024-07-02T08:58:43.948526051Z" level=info msg="RemovePodSandbox for \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\"" Jul 2 08:58:43.948625 env[1136]: time="2024-07-02T08:58:43.948568921Z" level=info msg="Forcibly stopping sandbox \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\"" Jul 2 08:58:44.051212 env[1136]: 2024-07-02 08:58:43.994 [WARNING][4121] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0", GenerateName:"calico-kube-controllers-76df6cdb96-", Namespace:"calico-system", SelfLink:"", UID:"3e63f945-4c76-4d3c-a7c2-bae61ae4b627", ResourceVersion:"887", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 58, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"76df6cdb96", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"13c3551ed4f7e7d431fe8d61e40693dafb4090f8d1c5a41415ee0af8d6bb1306", Pod:"calico-kube-controllers-76df6cdb96-sb9dg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.9.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid94dac8f347", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:44.051212 env[1136]: 2024-07-02 08:58:43.994 [INFO][4121] k8s.go 608: Cleaning up netns ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:44.051212 env[1136]: 2024-07-02 08:58:43.994 [INFO][4121] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" iface="eth0" netns="" Jul 2 08:58:44.051212 env[1136]: 2024-07-02 08:58:43.994 [INFO][4121] k8s.go 615: Releasing IP address(es) ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:44.051212 env[1136]: 2024-07-02 08:58:43.994 [INFO][4121] utils.go 188: Calico CNI releasing IP address ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:44.051212 env[1136]: 2024-07-02 08:58:44.036 [INFO][4127] ipam_plugin.go 411: Releasing address using handleID ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" HandleID="k8s-pod-network.62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:44.051212 env[1136]: 2024-07-02 08:58:44.036 [INFO][4127] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:44.051212 env[1136]: 2024-07-02 08:58:44.037 [INFO][4127] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:44.051212 env[1136]: 2024-07-02 08:58:44.046 [WARNING][4127] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" HandleID="k8s-pod-network.62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:44.051212 env[1136]: 2024-07-02 08:58:44.046 [INFO][4127] ipam_plugin.go 439: Releasing address using workloadID ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" HandleID="k8s-pod-network.62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--kube--controllers--76df6cdb96--sb9dg-eth0" Jul 2 08:58:44.051212 env[1136]: 2024-07-02 08:58:44.047 [INFO][4127] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:44.051212 env[1136]: 2024-07-02 08:58:44.049 [INFO][4121] k8s.go 621: Teardown processing complete. ContainerID="62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2" Jul 2 08:58:44.051834 env[1136]: time="2024-07-02T08:58:44.051695064Z" level=info msg="TearDown network for sandbox \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\" successfully" Jul 2 08:58:44.063061 env[1136]: time="2024-07-02T08:58:44.063022788Z" level=info msg="RemovePodSandbox \"62ef85351f42663c3c363991239324685bc3082688aeca01f577d71a9b5a96f2\" returns successfully" Jul 2 08:58:44.063467 env[1136]: time="2024-07-02T08:58:44.063435493Z" level=info msg="StopPodSandbox for \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\"" Jul 2 08:58:44.153668 env[1136]: 2024-07-02 08:58:44.120 [WARNING][4146] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6", ResourceVersion:"859", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 57, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d", Pod:"coredns-76f75df574-7p8cb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.9.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3e9580b9e9c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:44.153668 env[1136]: 2024-07-02 08:58:44.120 [INFO][4146] k8s.go 608: Cleaning up netns ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:44.153668 env[1136]: 2024-07-02 08:58:44.120 [INFO][4146] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" iface="eth0" netns="" Jul 2 08:58:44.153668 env[1136]: 2024-07-02 08:58:44.120 [INFO][4146] k8s.go 615: Releasing IP address(es) ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:44.153668 env[1136]: 2024-07-02 08:58:44.120 [INFO][4146] utils.go 188: Calico CNI releasing IP address ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:44.153668 env[1136]: 2024-07-02 08:58:44.142 [INFO][4152] ipam_plugin.go 411: Releasing address using handleID ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" HandleID="k8s-pod-network.69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:44.153668 env[1136]: 2024-07-02 08:58:44.142 [INFO][4152] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:44.153668 env[1136]: 2024-07-02 08:58:44.142 [INFO][4152] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:44.153668 env[1136]: 2024-07-02 08:58:44.149 [WARNING][4152] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" HandleID="k8s-pod-network.69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:44.153668 env[1136]: 2024-07-02 08:58:44.149 [INFO][4152] ipam_plugin.go 439: Releasing address using workloadID ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" HandleID="k8s-pod-network.69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:44.153668 env[1136]: 2024-07-02 08:58:44.150 [INFO][4152] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:44.153668 env[1136]: 2024-07-02 08:58:44.151 [INFO][4146] k8s.go 621: Teardown processing complete. ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:44.156150 env[1136]: time="2024-07-02T08:58:44.156116176Z" level=info msg="TearDown network for sandbox \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\" successfully" Jul 2 08:58:44.156267 env[1136]: time="2024-07-02T08:58:44.156210493Z" level=info msg="StopPodSandbox for \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\" returns successfully" Jul 2 08:58:44.156972 env[1136]: time="2024-07-02T08:58:44.156933481Z" level=info msg="RemovePodSandbox for \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\"" Jul 2 08:58:44.157082 env[1136]: time="2024-07-02T08:58:44.157042676Z" level=info msg="Forcibly stopping sandbox \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\"" Jul 2 08:58:44.285349 env[1136]: 2024-07-02 08:58:44.195 [WARNING][4170] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"08e9b7e4-ebfd-45c4-8671-dcd7d32da4b6", ResourceVersion:"859", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 57, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"d614f7524f95365053a18f3fe0141ee4d3c89435e8717a92f58fb4b71249dd3d", Pod:"coredns-76f75df574-7p8cb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.9.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3e9580b9e9c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:44.285349 env[1136]: 2024-07-02 08:58:44.196 [INFO][4170] k8s.go 608: Cleaning up netns ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:44.285349 env[1136]: 2024-07-02 08:58:44.196 [INFO][4170] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" iface="eth0" netns="" Jul 2 08:58:44.285349 env[1136]: 2024-07-02 08:58:44.196 [INFO][4170] k8s.go 615: Releasing IP address(es) ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:44.285349 env[1136]: 2024-07-02 08:58:44.196 [INFO][4170] utils.go 188: Calico CNI releasing IP address ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:44.285349 env[1136]: 2024-07-02 08:58:44.216 [INFO][4176] ipam_plugin.go 411: Releasing address using handleID ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" HandleID="k8s-pod-network.69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:44.285349 env[1136]: 2024-07-02 08:58:44.216 [INFO][4176] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:44.285349 env[1136]: 2024-07-02 08:58:44.216 [INFO][4176] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:44.285349 env[1136]: 2024-07-02 08:58:44.277 [WARNING][4176] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" HandleID="k8s-pod-network.69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:44.285349 env[1136]: 2024-07-02 08:58:44.277 [INFO][4176] ipam_plugin.go 439: Releasing address using workloadID ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" HandleID="k8s-pod-network.69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--7p8cb-eth0" Jul 2 08:58:44.285349 env[1136]: 2024-07-02 08:58:44.280 [INFO][4176] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:44.285349 env[1136]: 2024-07-02 08:58:44.282 [INFO][4170] k8s.go 621: Teardown processing complete. ContainerID="69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864" Jul 2 08:58:44.286246 env[1136]: time="2024-07-02T08:58:44.285399218Z" level=info msg="TearDown network for sandbox \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\" successfully" Jul 2 08:58:44.490793 env[1136]: time="2024-07-02T08:58:44.490349314Z" level=info msg="RemovePodSandbox \"69ff46296dbaea24ba8f87cf70b458faa088bca34aa409b69f13d159d2aa2864\" returns successfully" Jul 2 08:58:44.493262 env[1136]: time="2024-07-02T08:58:44.493190279Z" level=info msg="StopPodSandbox for \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\"" Jul 2 08:58:44.646799 env[1136]: 2024-07-02 08:58:44.590 [WARNING][4194] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"6f72bbc2-6c33-4033-bc07-2e6f5f55f594", ResourceVersion:"854", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 58, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85", Pod:"csi-node-driver-jqbj5", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.9.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali05bb121d81b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:44.646799 env[1136]: 2024-07-02 08:58:44.590 [INFO][4194] k8s.go 608: Cleaning up netns ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:44.646799 env[1136]: 2024-07-02 08:58:44.590 [INFO][4194] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" iface="eth0" netns="" Jul 2 08:58:44.646799 env[1136]: 2024-07-02 08:58:44.590 [INFO][4194] k8s.go 615: Releasing IP address(es) ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:44.646799 env[1136]: 2024-07-02 08:58:44.590 [INFO][4194] utils.go 188: Calico CNI releasing IP address ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:44.646799 env[1136]: 2024-07-02 08:58:44.635 [INFO][4201] ipam_plugin.go 411: Releasing address using handleID ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" HandleID="k8s-pod-network.10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:44.646799 env[1136]: 2024-07-02 08:58:44.635 [INFO][4201] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:44.646799 env[1136]: 2024-07-02 08:58:44.635 [INFO][4201] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:44.646799 env[1136]: 2024-07-02 08:58:44.642 [WARNING][4201] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" HandleID="k8s-pod-network.10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:44.646799 env[1136]: 2024-07-02 08:58:44.642 [INFO][4201] ipam_plugin.go 439: Releasing address using workloadID ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" HandleID="k8s-pod-network.10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:44.646799 env[1136]: 2024-07-02 08:58:44.643 [INFO][4201] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:44.646799 env[1136]: 2024-07-02 08:58:44.645 [INFO][4194] k8s.go 621: Teardown processing complete. ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:44.647525 env[1136]: time="2024-07-02T08:58:44.647491685Z" level=info msg="TearDown network for sandbox \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\" successfully" Jul 2 08:58:44.647632 env[1136]: time="2024-07-02T08:58:44.647611410Z" level=info msg="StopPodSandbox for \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\" returns successfully" Jul 2 08:58:44.648314 env[1136]: time="2024-07-02T08:58:44.648278503Z" level=info msg="RemovePodSandbox for \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\"" Jul 2 08:58:44.648374 env[1136]: time="2024-07-02T08:58:44.648319119Z" level=info msg="Forcibly stopping sandbox \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\"" Jul 2 08:58:44.720626 env[1136]: 2024-07-02 08:58:44.687 [WARNING][4220] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"6f72bbc2-6c33-4033-bc07-2e6f5f55f594", ResourceVersion:"854", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 58, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85", Pod:"csi-node-driver-jqbj5", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.9.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali05bb121d81b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:44.720626 env[1136]: 2024-07-02 08:58:44.687 [INFO][4220] k8s.go 608: Cleaning up netns ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:44.720626 env[1136]: 2024-07-02 08:58:44.687 [INFO][4220] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" iface="eth0" netns="" Jul 2 08:58:44.720626 env[1136]: 2024-07-02 08:58:44.687 [INFO][4220] k8s.go 615: Releasing IP address(es) ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:44.720626 env[1136]: 2024-07-02 08:58:44.687 [INFO][4220] utils.go 188: Calico CNI releasing IP address ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:44.720626 env[1136]: 2024-07-02 08:58:44.710 [INFO][4226] ipam_plugin.go 411: Releasing address using handleID ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" HandleID="k8s-pod-network.10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:44.720626 env[1136]: 2024-07-02 08:58:44.710 [INFO][4226] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:44.720626 env[1136]: 2024-07-02 08:58:44.710 [INFO][4226] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:44.720626 env[1136]: 2024-07-02 08:58:44.716 [WARNING][4226] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" HandleID="k8s-pod-network.10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:44.720626 env[1136]: 2024-07-02 08:58:44.716 [INFO][4226] ipam_plugin.go 439: Releasing address using workloadID ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" HandleID="k8s-pod-network.10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-csi--node--driver--jqbj5-eth0" Jul 2 08:58:44.720626 env[1136]: 2024-07-02 08:58:44.718 [INFO][4226] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:44.720626 env[1136]: 2024-07-02 08:58:44.719 [INFO][4220] k8s.go 621: Teardown processing complete. ContainerID="10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606" Jul 2 08:58:44.724992 env[1136]: time="2024-07-02T08:58:44.720666016Z" level=info msg="TearDown network for sandbox \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\" successfully" Jul 2 08:58:44.727201 env[1136]: time="2024-07-02T08:58:44.727166274Z" level=info msg="RemovePodSandbox \"10cf94ea37cb7f0973002d15cbd5655c9996786059dc6790e367b2b12fa84606\" returns successfully" Jul 2 08:58:44.727672 env[1136]: time="2024-07-02T08:58:44.727642708Z" level=info msg="StopPodSandbox for \"e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de\"" Jul 2 08:58:44.727924 env[1136]: time="2024-07-02T08:58:44.727881217Z" level=info msg="TearDown network for sandbox \"e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de\" successfully" Jul 2 08:58:44.728025 env[1136]: time="2024-07-02T08:58:44.728005700Z" level=info msg="StopPodSandbox for \"e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de\" returns successfully" Jul 2 08:58:44.728341 env[1136]: time="2024-07-02T08:58:44.728321052Z" level=info msg="RemovePodSandbox for \"e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de\"" Jul 2 08:58:44.728446 env[1136]: time="2024-07-02T08:58:44.728412905Z" level=info msg="Forcibly stopping sandbox \"e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de\"" Jul 2 08:58:44.728549 env[1136]: time="2024-07-02T08:58:44.728530145Z" level=info msg="TearDown network for sandbox \"e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de\" successfully" Jul 2 08:58:44.732499 env[1136]: time="2024-07-02T08:58:44.732473901Z" level=info msg="RemovePodSandbox \"e0ced255366117077cde6ed3e06967c5fd09be65e8db8f82ab45c04fa42ee1de\" returns successfully" Jul 2 08:58:44.732874 env[1136]: time="2024-07-02T08:58:44.732855057Z" level=info msg="StopPodSandbox for \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\"" Jul 2 08:58:44.807640 env[1136]: 2024-07-02 08:58:44.773 [WARNING][4244] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"ab647899-eb65-46d0-97d7-4d252b79f921", ResourceVersion:"864", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 57, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5", Pod:"coredns-76f75df574-6w7g4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.9.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie3321a8b400", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:44.807640 env[1136]: 2024-07-02 08:58:44.773 [INFO][4244] k8s.go 608: Cleaning up netns ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:44.807640 env[1136]: 2024-07-02 08:58:44.773 [INFO][4244] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" iface="eth0" netns="" Jul 2 08:58:44.807640 env[1136]: 2024-07-02 08:58:44.773 [INFO][4244] k8s.go 615: Releasing IP address(es) ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:44.807640 env[1136]: 2024-07-02 08:58:44.773 [INFO][4244] utils.go 188: Calico CNI releasing IP address ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:44.807640 env[1136]: 2024-07-02 08:58:44.796 [INFO][4250] ipam_plugin.go 411: Releasing address using handleID ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" HandleID="k8s-pod-network.f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:44.807640 env[1136]: 2024-07-02 08:58:44.796 [INFO][4250] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:44.807640 env[1136]: 2024-07-02 08:58:44.796 [INFO][4250] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:44.807640 env[1136]: 2024-07-02 08:58:44.803 [WARNING][4250] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" HandleID="k8s-pod-network.f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:44.807640 env[1136]: 2024-07-02 08:58:44.803 [INFO][4250] ipam_plugin.go 439: Releasing address using workloadID ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" HandleID="k8s-pod-network.f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:44.807640 env[1136]: 2024-07-02 08:58:44.805 [INFO][4250] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:44.807640 env[1136]: 2024-07-02 08:58:44.806 [INFO][4244] k8s.go 621: Teardown processing complete. ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:44.808302 env[1136]: time="2024-07-02T08:58:44.808271037Z" level=info msg="TearDown network for sandbox \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\" successfully" Jul 2 08:58:44.808375 env[1136]: time="2024-07-02T08:58:44.808356749Z" level=info msg="StopPodSandbox for \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\" returns successfully" Jul 2 08:58:44.808912 env[1136]: time="2024-07-02T08:58:44.808871976Z" level=info msg="RemovePodSandbox for \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\"" Jul 2 08:58:44.808969 env[1136]: time="2024-07-02T08:58:44.808920678Z" level=info msg="Forcibly stopping sandbox \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\"" Jul 2 08:58:44.882631 env[1136]: 2024-07-02 08:58:44.844 [WARNING][4269] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"ab647899-eb65-46d0-97d7-4d252b79f921", ResourceVersion:"864", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 57, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"8b8b1404eee2341daa58b3e2b9fcb58b4f038eaa0964e577b9a99dd07d6d77b5", Pod:"coredns-76f75df574-6w7g4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.9.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie3321a8b400", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:44.882631 env[1136]: 2024-07-02 08:58:44.844 [INFO][4269] k8s.go 608: Cleaning up netns ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:44.882631 env[1136]: 2024-07-02 08:58:44.845 [INFO][4269] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" iface="eth0" netns="" Jul 2 08:58:44.882631 env[1136]: 2024-07-02 08:58:44.845 [INFO][4269] k8s.go 615: Releasing IP address(es) ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:44.882631 env[1136]: 2024-07-02 08:58:44.845 [INFO][4269] utils.go 188: Calico CNI releasing IP address ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:44.882631 env[1136]: 2024-07-02 08:58:44.869 [INFO][4276] ipam_plugin.go 411: Releasing address using handleID ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" HandleID="k8s-pod-network.f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:44.882631 env[1136]: 2024-07-02 08:58:44.869 [INFO][4276] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:44.882631 env[1136]: 2024-07-02 08:58:44.869 [INFO][4276] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:44.882631 env[1136]: 2024-07-02 08:58:44.877 [WARNING][4276] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" HandleID="k8s-pod-network.f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:44.882631 env[1136]: 2024-07-02 08:58:44.877 [INFO][4276] ipam_plugin.go 439: Releasing address using workloadID ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" HandleID="k8s-pod-network.f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-coredns--76f75df574--6w7g4-eth0" Jul 2 08:58:44.882631 env[1136]: 2024-07-02 08:58:44.879 [INFO][4276] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:44.882631 env[1136]: 2024-07-02 08:58:44.881 [INFO][4269] k8s.go 621: Teardown processing complete. ContainerID="f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548" Jul 2 08:58:44.883246 env[1136]: time="2024-07-02T08:58:44.883198441Z" level=info msg="TearDown network for sandbox \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\" successfully" Jul 2 08:58:44.886986 env[1136]: time="2024-07-02T08:58:44.886945137Z" level=info msg="RemovePodSandbox \"f2906ac57191f06249781a73611185a5c46462813d6caf0879b515379a75d548\" returns successfully" Jul 2 08:58:46.235738 env[1136]: time="2024-07-02T08:58:46.235665334Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:46.239663 env[1136]: time="2024-07-02T08:58:46.239618477Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0f80feca743f4a84ddda4057266092db9134f9af9e20e12ea6fcfe51d7e3a020,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:46.242505 env[1136]: time="2024-07-02T08:58:46.242463801Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:46.245103 env[1136]: time="2024-07-02T08:58:46.245050238Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:b3caf3e7b3042b293728a5ab55d893798d60fec55993a9531e82997de0e534cc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:46.245897 env[1136]: time="2024-07-02T08:58:46.245833659Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\" returns image reference \"sha256:0f80feca743f4a84ddda4057266092db9134f9af9e20e12ea6fcfe51d7e3a020\"" Jul 2 08:58:46.248562 env[1136]: time="2024-07-02T08:58:46.248524291Z" level=info msg="CreateContainer within sandbox \"31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 2 08:58:46.266304 env[1136]: time="2024-07-02T08:58:46.266239820Z" level=info msg="CreateContainer within sandbox \"31c65cacb2a0d644d247d696032d897858d8faede4158932022c4ab9fe84dd85\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"bd65b4ad8bcd05dbf03ce3fe5f9241e780a455ac2820806cd440fdabd8644d23\"" Jul 2 08:58:46.267098 env[1136]: time="2024-07-02T08:58:46.267066823Z" level=info msg="StartContainer for \"bd65b4ad8bcd05dbf03ce3fe5f9241e780a455ac2820806cd440fdabd8644d23\"" Jul 2 08:58:46.298570 systemd[1]: run-containerd-runc-k8s.io-bd65b4ad8bcd05dbf03ce3fe5f9241e780a455ac2820806cd440fdabd8644d23-runc.z0Yf6z.mount: Deactivated successfully. Jul 2 08:58:46.309400 systemd[1]: Started cri-containerd-bd65b4ad8bcd05dbf03ce3fe5f9241e780a455ac2820806cd440fdabd8644d23.scope. Jul 2 08:58:46.324000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.324000 audit[4290]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f92b4a96cc8 items=0 ppid=3900 pid=4290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:46.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264363562346164386263643035646266303363653366653566393234 Jul 2 08:58:46.324000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.324000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.324000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.324000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.324000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.324000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.324000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.324000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.324000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.324000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.324000 audit: BPF prog-id=186 op=LOAD Jul 2 08:58:46.324000 audit[4290]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c00030a218 items=0 ppid=3900 pid=4290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:46.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264363562346164386263643035646266303363653366653566393234 Jul 2 08:58:46.325000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.325000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.325000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.325000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.325000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.325000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.325000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.325000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.325000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.325000 audit: BPF prog-id=187 op=LOAD Jul 2 08:58:46.325000 audit[4290]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c00030a268 items=0 ppid=3900 pid=4290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:46.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264363562346164386263643035646266303363653366653566393234 Jul 2 08:58:46.326000 audit: BPF prog-id=187 op=UNLOAD Jul 2 08:58:46.326000 audit: BPF prog-id=186 op=UNLOAD Jul 2 08:58:46.326000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.326000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.326000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.326000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.326000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.326000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.326000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.326000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.326000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.326000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:46.326000 audit: BPF prog-id=188 op=LOAD Jul 2 08:58:46.326000 audit[4290]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c00030a2f8 items=0 ppid=3900 pid=4290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:46.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264363562346164386263643035646266303363653366653566393234 Jul 2 08:58:46.357411 env[1136]: time="2024-07-02T08:58:46.357322082Z" level=info msg="StartContainer for \"bd65b4ad8bcd05dbf03ce3fe5f9241e780a455ac2820806cd440fdabd8644d23\" returns successfully" Jul 2 08:58:46.857046 kubelet[2009]: I0702 08:58:46.856994 2009 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 2 08:58:46.861802 kubelet[2009]: I0702 08:58:46.861712 2009 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 2 08:58:47.115376 kubelet[2009]: I0702 08:58:47.115169 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-jqbj5" podStartSLOduration=36.472922598 podStartE2EDuration="45.115082274s" podCreationTimestamp="2024-07-02 08:58:02 +0000 UTC" firstStartedPulling="2024-07-02 08:58:37.604562582 +0000 UTC m=+54.157995029" lastFinishedPulling="2024-07-02 08:58:46.246722268 +0000 UTC m=+62.800154705" observedRunningTime="2024-07-02 08:58:47.110344096 +0000 UTC m=+63.663776593" watchObservedRunningTime="2024-07-02 08:58:47.115082274 +0000 UTC m=+63.668514761" Jul 2 08:58:51.438000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:51.442627 kernel: kauditd_printk_skb: 76 callbacks suppressed Jul 2 08:58:51.442710 kernel: audit: type=1400 audit(1719910731.438:1264): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:51.447000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:51.447000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002a39d60 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:58:51.464114 kernel: audit: type=1400 audit(1719910731.447:1265): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:51.464558 kernel: audit: type=1300 audit(1719910731.447:1265): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002a39d60 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:58:51.447000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:58:51.469615 kernel: audit: type=1327 audit(1719910731.447:1265): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:58:51.438000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001ea0de0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:58:51.438000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:58:51.480066 kernel: audit: type=1300 audit(1719910731.438:1264): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001ea0de0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:58:51.480151 kernel: audit: type=1327 audit(1719910731.438:1264): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:58:51.447000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:51.447000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001ea0e00 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:58:51.492428 kernel: audit: type=1400 audit(1719910731.447:1266): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:51.492548 kernel: audit: type=1300 audit(1719910731.447:1266): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001ea0e00 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:58:51.492577 kernel: audit: type=1327 audit(1719910731.447:1266): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:58:51.447000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:58:51.464000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:51.464000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002a39fe0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:58:51.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:58:51.502621 kernel: audit: type=1400 audit(1719910731.464:1267): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:58:52.282086 kubelet[2009]: I0702 08:58:52.282006 2009 topology_manager.go:215] "Topology Admit Handler" podUID="a554f44e-1ec7-4b15-abcf-aedd93b544f2" podNamespace="calico-apiserver" podName="calico-apiserver-67c479cd85-4tn5s" Jul 2 08:58:52.303946 systemd[1]: Created slice kubepods-besteffort-poda554f44e_1ec7_4b15_abcf_aedd93b544f2.slice. Jul 2 08:58:52.308306 kubelet[2009]: I0702 08:58:52.308273 2009 topology_manager.go:215] "Topology Admit Handler" podUID="4986b1c3-6228-44fc-8c6e-33abea42d9b2" podNamespace="calico-apiserver" podName="calico-apiserver-67c479cd85-6fgb4" Jul 2 08:58:52.313389 systemd[1]: Created slice kubepods-besteffort-pod4986b1c3_6228_44fc_8c6e_33abea42d9b2.slice. Jul 2 08:58:52.341000 audit[4396]: NETFILTER_CFG table=filter:116 family=2 entries=9 op=nft_register_rule pid=4396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:52.341000 audit[4396]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffd676829a0 a2=0 a3=7ffd6768298c items=0 ppid=2142 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:52.341000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:52.343000 audit[4396]: NETFILTER_CFG table=nat:117 family=2 entries=20 op=nft_register_rule pid=4396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:52.343000 audit[4396]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd676829a0 a2=0 a3=7ffd6768298c items=0 ppid=2142 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:52.343000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:52.364000 audit[4398]: NETFILTER_CFG table=filter:118 family=2 entries=10 op=nft_register_rule pid=4398 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:52.364000 audit[4398]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffca93d6d80 a2=0 a3=7ffca93d6d6c items=0 ppid=2142 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:52.364000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:52.372000 audit[4398]: NETFILTER_CFG table=nat:119 family=2 entries=20 op=nft_register_rule pid=4398 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:52.372000 audit[4398]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffca93d6d80 a2=0 a3=7ffca93d6d6c items=0 ppid=2142 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:52.372000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:52.465611 kubelet[2009]: I0702 08:58:52.465564 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a554f44e-1ec7-4b15-abcf-aedd93b544f2-calico-apiserver-certs\") pod \"calico-apiserver-67c479cd85-4tn5s\" (UID: \"a554f44e-1ec7-4b15-abcf-aedd93b544f2\") " pod="calico-apiserver/calico-apiserver-67c479cd85-4tn5s" Jul 2 08:58:52.465754 kubelet[2009]: I0702 08:58:52.465634 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/4986b1c3-6228-44fc-8c6e-33abea42d9b2-calico-apiserver-certs\") pod \"calico-apiserver-67c479cd85-6fgb4\" (UID: \"4986b1c3-6228-44fc-8c6e-33abea42d9b2\") " pod="calico-apiserver/calico-apiserver-67c479cd85-6fgb4" Jul 2 08:58:52.465754 kubelet[2009]: I0702 08:58:52.465667 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6mxcz\" (UniqueName: \"kubernetes.io/projected/4986b1c3-6228-44fc-8c6e-33abea42d9b2-kube-api-access-6mxcz\") pod \"calico-apiserver-67c479cd85-6fgb4\" (UID: \"4986b1c3-6228-44fc-8c6e-33abea42d9b2\") " pod="calico-apiserver/calico-apiserver-67c479cd85-6fgb4" Jul 2 08:58:52.465754 kubelet[2009]: I0702 08:58:52.465712 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zllrp\" (UniqueName: \"kubernetes.io/projected/a554f44e-1ec7-4b15-abcf-aedd93b544f2-kube-api-access-zllrp\") pod \"calico-apiserver-67c479cd85-4tn5s\" (UID: \"a554f44e-1ec7-4b15-abcf-aedd93b544f2\") " pod="calico-apiserver/calico-apiserver-67c479cd85-4tn5s" Jul 2 08:58:52.611867 env[1136]: time="2024-07-02T08:58:52.611397650Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-67c479cd85-4tn5s,Uid:a554f44e-1ec7-4b15-abcf-aedd93b544f2,Namespace:calico-apiserver,Attempt:0,}" Jul 2 08:58:52.617140 env[1136]: time="2024-07-02T08:58:52.617082654Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-67c479cd85-6fgb4,Uid:4986b1c3-6228-44fc-8c6e-33abea42d9b2,Namespace:calico-apiserver,Attempt:0,}" Jul 2 08:58:52.833891 systemd-networkd[969]: cali0f18ca25216: Link UP Jul 2 08:58:52.837078 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 08:58:52.837158 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0f18ca25216: link becomes ready Jul 2 08:58:52.837279 systemd-networkd[969]: cali0f18ca25216: Gained carrier Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.700 [INFO][4403] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-eth0 calico-apiserver-67c479cd85- calico-apiserver a554f44e-1ec7-4b15-abcf-aedd93b544f2 967 0 2024-07-02 08:58:52 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:67c479cd85 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510-3-5-e-e1038c2d1d.novalocal calico-apiserver-67c479cd85-4tn5s eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali0f18ca25216 [] []}} ContainerID="0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-4tn5s" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-" Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.701 [INFO][4403] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-4tn5s" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-eth0" Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.767 [INFO][4426] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" HandleID="k8s-pod-network.0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-eth0" Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.792 [INFO][4426] ipam_plugin.go 264: Auto assigning IP ContainerID="0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" HandleID="k8s-pod-network.0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002efcc0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510-3-5-e-e1038c2d1d.novalocal", "pod":"calico-apiserver-67c479cd85-4tn5s", "timestamp":"2024-07-02 08:58:52.767413898 +0000 UTC"}, Hostname:"ci-3510-3-5-e-e1038c2d1d.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.792 [INFO][4426] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.792 [INFO][4426] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.792 [INFO][4426] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-5-e-e1038c2d1d.novalocal' Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.795 [INFO][4426] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.800 [INFO][4426] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.805 [INFO][4426] ipam.go 489: Trying affinity for 192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.808 [INFO][4426] ipam.go 155: Attempting to load block cidr=192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.811 [INFO][4426] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.811 [INFO][4426] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.9.192/26 handle="k8s-pod-network.0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.813 [INFO][4426] ipam.go 1685: Creating new handle: k8s-pod-network.0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483 Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.817 [INFO][4426] ipam.go 1203: Writing block in order to claim IPs block=192.168.9.192/26 handle="k8s-pod-network.0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.823 [INFO][4426] ipam.go 1216: Successfully claimed IPs: [192.168.9.197/26] block=192.168.9.192/26 handle="k8s-pod-network.0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.824 [INFO][4426] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.9.197/26] handle="k8s-pod-network.0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.824 [INFO][4426] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:52.851703 env[1136]: 2024-07-02 08:58:52.824 [INFO][4426] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.9.197/26] IPv6=[] ContainerID="0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" HandleID="k8s-pod-network.0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-eth0" Jul 2 08:58:52.852563 env[1136]: 2024-07-02 08:58:52.825 [INFO][4403] k8s.go 386: Populated endpoint ContainerID="0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-4tn5s" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-eth0", GenerateName:"calico-apiserver-67c479cd85-", Namespace:"calico-apiserver", SelfLink:"", UID:"a554f44e-1ec7-4b15-abcf-aedd93b544f2", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 58, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"67c479cd85", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"", Pod:"calico-apiserver-67c479cd85-4tn5s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.9.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0f18ca25216", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:52.852563 env[1136]: 2024-07-02 08:58:52.825 [INFO][4403] k8s.go 387: Calico CNI using IPs: [192.168.9.197/32] ContainerID="0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-4tn5s" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-eth0" Jul 2 08:58:52.852563 env[1136]: 2024-07-02 08:58:52.826 [INFO][4403] dataplane_linux.go 68: Setting the host side veth name to cali0f18ca25216 ContainerID="0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-4tn5s" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-eth0" Jul 2 08:58:52.852563 env[1136]: 2024-07-02 08:58:52.837 [INFO][4403] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-4tn5s" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-eth0" Jul 2 08:58:52.852563 env[1136]: 2024-07-02 08:58:52.838 [INFO][4403] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-4tn5s" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-eth0", GenerateName:"calico-apiserver-67c479cd85-", Namespace:"calico-apiserver", SelfLink:"", UID:"a554f44e-1ec7-4b15-abcf-aedd93b544f2", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 58, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"67c479cd85", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483", Pod:"calico-apiserver-67c479cd85-4tn5s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.9.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0f18ca25216", MAC:"46:f8:4a:5c:df:9f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:52.852563 env[1136]: 2024-07-02 08:58:52.848 [INFO][4403] k8s.go 500: Wrote updated endpoint to datastore ContainerID="0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-4tn5s" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--4tn5s-eth0" Jul 2 08:58:52.878368 env[1136]: time="2024-07-02T08:58:52.878241889Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:58:52.878368 env[1136]: time="2024-07-02T08:58:52.878326718Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:58:52.879419 env[1136]: time="2024-07-02T08:58:52.879379786Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:58:52.879739 env[1136]: time="2024-07-02T08:58:52.879682584Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483 pid=4460 runtime=io.containerd.runc.v2 Jul 2 08:58:52.901210 systemd[1]: Started cri-containerd-0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483.scope. Jul 2 08:58:52.902440 systemd-networkd[969]: cali2f723f1e8c8: Link UP Jul 2 08:58:52.906717 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2f723f1e8c8: link becomes ready Jul 2 08:58:52.906459 systemd-networkd[969]: cali2f723f1e8c8: Gained carrier Jul 2 08:58:52.915000 audit[4485]: NETFILTER_CFG table=filter:120 family=2 entries=61 op=nft_register_chain pid=4485 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:58:52.915000 audit[4485]: SYSCALL arch=c000003e syscall=46 success=yes exit=30316 a0=3 a1=7ffdbe0703d0 a2=0 a3=7ffdbe0703bc items=0 ppid=3347 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:52.915000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.719 [INFO][4409] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-eth0 calico-apiserver-67c479cd85- calico-apiserver 4986b1c3-6228-44fc-8c6e-33abea42d9b2 970 0 2024-07-02 08:58:52 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:67c479cd85 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510-3-5-e-e1038c2d1d.novalocal calico-apiserver-67c479cd85-6fgb4 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali2f723f1e8c8 [] []}} ContainerID="676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-6fgb4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-" Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.719 [INFO][4409] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-6fgb4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-eth0" Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.779 [INFO][4430] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" HandleID="k8s-pod-network.676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-eth0" Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.795 [INFO][4430] ipam_plugin.go 264: Auto assigning IP ContainerID="676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" HandleID="k8s-pod-network.676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001ff290), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510-3-5-e-e1038c2d1d.novalocal", "pod":"calico-apiserver-67c479cd85-6fgb4", "timestamp":"2024-07-02 08:58:52.779621238 +0000 UTC"}, Hostname:"ci-3510-3-5-e-e1038c2d1d.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.795 [INFO][4430] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.824 [INFO][4430] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.824 [INFO][4430] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-5-e-e1038c2d1d.novalocal' Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.840 [INFO][4430] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.851 [INFO][4430] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.866 [INFO][4430] ipam.go 489: Trying affinity for 192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.870 [INFO][4430] ipam.go 155: Attempting to load block cidr=192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.874 [INFO][4430] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.9.192/26 host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.874 [INFO][4430] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.9.192/26 handle="k8s-pod-network.676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.876 [INFO][4430] ipam.go 1685: Creating new handle: k8s-pod-network.676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.883 [INFO][4430] ipam.go 1203: Writing block in order to claim IPs block=192.168.9.192/26 handle="k8s-pod-network.676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.892 [INFO][4430] ipam.go 1216: Successfully claimed IPs: [192.168.9.198/26] block=192.168.9.192/26 handle="k8s-pod-network.676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.892 [INFO][4430] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.9.198/26] handle="k8s-pod-network.676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" host="ci-3510-3-5-e-e1038c2d1d.novalocal" Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.892 [INFO][4430] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:58:52.934513 env[1136]: 2024-07-02 08:58:52.892 [INFO][4430] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.9.198/26] IPv6=[] ContainerID="676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" HandleID="k8s-pod-network.676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" Workload="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-eth0" Jul 2 08:58:52.935334 env[1136]: 2024-07-02 08:58:52.897 [INFO][4409] k8s.go 386: Populated endpoint ContainerID="676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-6fgb4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-eth0", GenerateName:"calico-apiserver-67c479cd85-", Namespace:"calico-apiserver", SelfLink:"", UID:"4986b1c3-6228-44fc-8c6e-33abea42d9b2", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 58, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"67c479cd85", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"", Pod:"calico-apiserver-67c479cd85-6fgb4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.9.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2f723f1e8c8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:52.935334 env[1136]: 2024-07-02 08:58:52.897 [INFO][4409] k8s.go 387: Calico CNI using IPs: [192.168.9.198/32] ContainerID="676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-6fgb4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-eth0" Jul 2 08:58:52.935334 env[1136]: 2024-07-02 08:58:52.897 [INFO][4409] dataplane_linux.go 68: Setting the host side veth name to cali2f723f1e8c8 ContainerID="676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-6fgb4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-eth0" Jul 2 08:58:52.935334 env[1136]: 2024-07-02 08:58:52.907 [INFO][4409] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-6fgb4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-eth0" Jul 2 08:58:52.935334 env[1136]: 2024-07-02 08:58:52.907 [INFO][4409] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-6fgb4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-eth0", GenerateName:"calico-apiserver-67c479cd85-", Namespace:"calico-apiserver", SelfLink:"", UID:"4986b1c3-6228-44fc-8c6e-33abea42d9b2", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 58, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"67c479cd85", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-e-e1038c2d1d.novalocal", ContainerID:"676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e", Pod:"calico-apiserver-67c479cd85-6fgb4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.9.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2f723f1e8c8", MAC:"6a:8d:5a:62:55:28", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:58:52.935334 env[1136]: 2024-07-02 08:58:52.931 [INFO][4409] k8s.go 500: Wrote updated endpoint to datastore ContainerID="676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e" Namespace="calico-apiserver" Pod="calico-apiserver-67c479cd85-6fgb4" WorkloadEndpoint="ci--3510--3--5--e--e1038c2d1d.novalocal-k8s-calico--apiserver--67c479cd85--6fgb4-eth0" Jul 2 08:58:52.955901 env[1136]: time="2024-07-02T08:58:52.953694410Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:58:52.955901 env[1136]: time="2024-07-02T08:58:52.953791422Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:58:52.955901 env[1136]: time="2024-07-02T08:58:52.953833421Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:58:52.955901 env[1136]: time="2024-07-02T08:58:52.954010903Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e pid=4510 runtime=io.containerd.runc.v2 Jul 2 08:58:52.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.975000 audit: BPF prog-id=189 op=LOAD Jul 2 08:58:52.976000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.976000 audit[4471]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4460 pid=4471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:52.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031313361633139653064626131663332656361373639623135363830 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4460 pid=4471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:52.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031313361633139653064626131663332656361373639623135363830 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit: BPF prog-id=190 op=LOAD Jul 2 08:58:52.977000 audit[4471]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003c6ed0 items=0 ppid=4460 pid=4471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:52.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031313361633139653064626131663332656361373639623135363830 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.977000 audit: BPF prog-id=191 op=LOAD Jul 2 08:58:52.977000 audit[4471]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003c6f18 items=0 ppid=4460 pid=4471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:52.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031313361633139653064626131663332656361373639623135363830 Jul 2 08:58:52.979000 audit: BPF prog-id=191 op=UNLOAD Jul 2 08:58:52.979000 audit: BPF prog-id=190 op=UNLOAD Jul 2 08:58:52.979000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.979000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.979000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.979000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.979000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.979000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.979000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.979000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.979000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.979000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:52.979000 audit: BPF prog-id=192 op=LOAD Jul 2 08:58:52.979000 audit[4471]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003c7328 items=0 ppid=4460 pid=4471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:52.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031313361633139653064626131663332656361373639623135363830 Jul 2 08:58:52.991067 systemd[1]: run-containerd-runc-k8s.io-676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e-runc.jvdm1p.mount: Deactivated successfully. Jul 2 08:58:52.997288 systemd[1]: Started cri-containerd-676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e.scope. Jul 2 08:58:53.007000 audit[4533]: NETFILTER_CFG table=filter:121 family=2 entries=45 op=nft_register_chain pid=4533 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:58:53.007000 audit[4533]: SYSCALL arch=c000003e syscall=46 success=yes exit=23096 a0=3 a1=7ffe7a891470 a2=0 a3=7ffe7a89145c items=0 ppid=3347 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:53.007000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:58:53.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.029000 audit: BPF prog-id=193 op=LOAD Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4510 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:53.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637366132346136353738613264333162363139613933623964376666 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4510 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:53.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637366132346136353738613264333162363139613933623964376666 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit: BPF prog-id=194 op=LOAD Jul 2 08:58:53.030000 audit[4522]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00021c630 items=0 ppid=4510 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:53.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637366132346136353738613264333162363139613933623964376666 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit: BPF prog-id=195 op=LOAD Jul 2 08:58:53.030000 audit[4522]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00021c678 items=0 ppid=4510 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:53.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637366132346136353738613264333162363139613933623964376666 Jul 2 08:58:53.030000 audit: BPF prog-id=195 op=UNLOAD Jul 2 08:58:53.030000 audit: BPF prog-id=194 op=UNLOAD Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:53.030000 audit: BPF prog-id=196 op=LOAD Jul 2 08:58:53.030000 audit[4522]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00021ca88 items=0 ppid=4510 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:53.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637366132346136353738613264333162363139613933623964376666 Jul 2 08:58:53.080216 env[1136]: time="2024-07-02T08:58:53.080124844Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-67c479cd85-4tn5s,Uid:a554f44e-1ec7-4b15-abcf-aedd93b544f2,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483\"" Jul 2 08:58:53.085656 env[1136]: time="2024-07-02T08:58:53.085558025Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\"" Jul 2 08:58:53.086450 env[1136]: time="2024-07-02T08:58:53.086405837Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-67c479cd85-6fgb4,Uid:4986b1c3-6228-44fc-8c6e-33abea42d9b2,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e\"" Jul 2 08:58:54.773223 systemd-networkd[969]: cali2f723f1e8c8: Gained IPv6LL Jul 2 08:58:54.837764 systemd-networkd[969]: cali0f18ca25216: Gained IPv6LL Jul 2 08:58:57.562144 env[1136]: time="2024-07-02T08:58:57.562095054Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:57.565837 env[1136]: time="2024-07-02T08:58:57.565805901Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:57.568654 env[1136]: time="2024-07-02T08:58:57.568629462Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:57.573100 env[1136]: time="2024-07-02T08:58:57.573067103Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:e8f124312a4c41451e51bfc00b6e98929e9eb0510905f3301542719a3e8d2fec,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:57.574163 env[1136]: time="2024-07-02T08:58:57.574138896Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\" returns image reference \"sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6\"" Jul 2 08:58:57.575936 env[1136]: time="2024-07-02T08:58:57.575915381Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\"" Jul 2 08:58:57.577046 env[1136]: time="2024-07-02T08:58:57.576992473Z" level=info msg="CreateContainer within sandbox \"0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 2 08:58:57.607829 env[1136]: time="2024-07-02T08:58:57.607766188Z" level=info msg="CreateContainer within sandbox \"0113ac19e0dba1f32eca769b156808f5ea1dbbd5fdd5c5b53645a4ed2e922483\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"52aac3e77831aacbfd59617e517f180f29ea54fa8cc327c44736c6d132127d34\"" Jul 2 08:58:57.608704 env[1136]: time="2024-07-02T08:58:57.608623367Z" level=info msg="StartContainer for \"52aac3e77831aacbfd59617e517f180f29ea54fa8cc327c44736c6d132127d34\"" Jul 2 08:58:57.648044 systemd[1]: run-containerd-runc-k8s.io-52aac3e77831aacbfd59617e517f180f29ea54fa8cc327c44736c6d132127d34-runc.8AyV0U.mount: Deactivated successfully. Jul 2 08:58:57.651523 systemd[1]: Started cri-containerd-52aac3e77831aacbfd59617e517f180f29ea54fa8cc327c44736c6d132127d34.scope. Jul 2 08:58:57.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.669480 kernel: kauditd_printk_skb: 134 callbacks suppressed Jul 2 08:58:57.669545 kernel: audit: type=1400 audit(1719910737.666:1310): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677809 kernel: audit: type=1400 audit(1719910737.666:1311): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.681784 kernel: audit: type=1400 audit(1719910737.670:1312): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.681832 kernel: audit: type=1400 audit(1719910737.670:1313): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.684746 kernel: audit: type=1400 audit(1719910737.670:1314): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.691637 kernel: audit: type=1400 audit(1719910737.670:1315): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.692472 kernel: audit: type=1400 audit(1719910737.670:1316): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.702323 kernel: audit: type=1400 audit(1719910737.670:1317): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.702388 kernel: audit: type=1400 audit(1719910737.670:1318): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.702415 kernel: audit: type=1400 audit(1719910737.673:1319): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.673000 audit: BPF prog-id=197 op=LOAD Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4460 pid=4578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:57.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532616163336537373833316161636266643539363137653531376631 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4460 pid=4578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:57.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532616163336537373833316161636266643539363137653531376631 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit: BPF prog-id=198 op=LOAD Jul 2 08:58:57.677000 audit[4578]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003eaaa0 items=0 ppid=4460 pid=4578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:57.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532616163336537373833316161636266643539363137653531376631 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit: BPF prog-id=199 op=LOAD Jul 2 08:58:57.677000 audit[4578]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003eaae8 items=0 ppid=4460 pid=4578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:57.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532616163336537373833316161636266643539363137653531376631 Jul 2 08:58:57.677000 audit: BPF prog-id=199 op=UNLOAD Jul 2 08:58:57.677000 audit: BPF prog-id=198 op=UNLOAD Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { perfmon } for pid=4578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit[4578]: AVC avc: denied { bpf } for pid=4578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:57.677000 audit: BPF prog-id=200 op=LOAD Jul 2 08:58:57.677000 audit[4578]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003eaef8 items=0 ppid=4460 pid=4578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:57.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532616163336537373833316161636266643539363137653531376631 Jul 2 08:58:57.732822 env[1136]: time="2024-07-02T08:58:57.732778428Z" level=info msg="StartContainer for \"52aac3e77831aacbfd59617e517f180f29ea54fa8cc327c44736c6d132127d34\" returns successfully" Jul 2 08:58:58.065124 env[1136]: time="2024-07-02T08:58:58.065041010Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:58.080223 env[1136]: time="2024-07-02T08:58:58.080153622Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:58.088618 env[1136]: time="2024-07-02T08:58:58.088576264Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:58.093909 env[1136]: time="2024-07-02T08:58:58.093885582Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:e8f124312a4c41451e51bfc00b6e98929e9eb0510905f3301542719a3e8d2fec,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:58:58.095541 env[1136]: time="2024-07-02T08:58:58.095475837Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\" returns image reference \"sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6\"" Jul 2 08:58:58.098332 env[1136]: time="2024-07-02T08:58:58.098305661Z" level=info msg="CreateContainer within sandbox \"676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 2 08:58:58.139832 env[1136]: time="2024-07-02T08:58:58.139790093Z" level=info msg="CreateContainer within sandbox \"676a24a6578a2d31b619a93b9d7ffe68d83789e1305e55493a8558bc7313946e\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"ce60405d2dc9d6017d48b071b342f1a75cd2d6ef2dc1aa2a420e76e22b6cbe64\"" Jul 2 08:58:58.140836 env[1136]: time="2024-07-02T08:58:58.140814245Z" level=info msg="StartContainer for \"ce60405d2dc9d6017d48b071b342f1a75cd2d6ef2dc1aa2a420e76e22b6cbe64\"" Jul 2 08:58:58.167839 systemd[1]: Started cri-containerd-ce60405d2dc9d6017d48b071b342f1a75cd2d6ef2dc1aa2a420e76e22b6cbe64.scope. Jul 2 08:58:58.219000 audit[4635]: NETFILTER_CFG table=filter:122 family=2 entries=10 op=nft_register_rule pid=4635 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:58.219000 audit[4635]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffe7a2a4d50 a2=0 a3=7ffe7a2a4d3c items=0 ppid=2142 pid=4635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:58.219000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:58.220000 audit[4635]: NETFILTER_CFG table=nat:123 family=2 entries=20 op=nft_register_rule pid=4635 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:58.220000 audit[4635]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffe7a2a4d50 a2=0 a3=7ffe7a2a4d3c items=0 ppid=2142 pid=4635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:58.220000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:58.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.239000 audit: BPF prog-id=201 op=LOAD Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4510 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:58.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363034303564326463396436303137643438623037316233343266 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4510 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:58.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363034303564326463396436303137643438623037316233343266 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit: BPF prog-id=202 op=LOAD Jul 2 08:58:58.240000 audit[4618]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a0370 items=0 ppid=4510 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:58.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363034303564326463396436303137643438623037316233343266 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.240000 audit: BPF prog-id=203 op=LOAD Jul 2 08:58:58.240000 audit[4618]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a03b8 items=0 ppid=4510 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:58.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363034303564326463396436303137643438623037316233343266 Jul 2 08:58:58.241000 audit: BPF prog-id=203 op=UNLOAD Jul 2 08:58:58.241000 audit: BPF prog-id=202 op=UNLOAD Jul 2 08:58:58.241000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.241000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.241000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.241000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.241000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.241000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.241000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.241000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.241000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.241000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:58:58.241000 audit: BPF prog-id=204 op=LOAD Jul 2 08:58:58.241000 audit[4618]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a07c8 items=0 ppid=4510 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:58.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363034303564326463396436303137643438623037316233343266 Jul 2 08:58:58.295220 env[1136]: time="2024-07-02T08:58:58.295159169Z" level=info msg="StartContainer for \"ce60405d2dc9d6017d48b071b342f1a75cd2d6ef2dc1aa2a420e76e22b6cbe64\" returns successfully" Jul 2 08:58:58.828000 audit[4589]: AVC avc: denied { watch } for pid=4589 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_08_58_52.3426123079/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c473 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c83,c473 tclass=file permissive=0 Jul 2 08:58:58.828000 audit[4589]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0005139a0 a2=fc6 a3=0 items=0 ppid=4460 pid=4589 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c473 key=(null) Jul 2 08:58:58.828000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 08:58:59.195035 kubelet[2009]: I0702 08:58:59.194856 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-67c479cd85-4tn5s" podStartSLOduration=2.70094784 podStartE2EDuration="7.194762157s" podCreationTimestamp="2024-07-02 08:58:52 +0000 UTC" firstStartedPulling="2024-07-02 08:58:53.081392734 +0000 UTC m=+69.634825171" lastFinishedPulling="2024-07-02 08:58:57.575207051 +0000 UTC m=+74.128639488" observedRunningTime="2024-07-02 08:58:58.197226953 +0000 UTC m=+74.750659400" watchObservedRunningTime="2024-07-02 08:58:59.194762157 +0000 UTC m=+75.748194644" Jul 2 08:58:59.423374 kubelet[2009]: I0702 08:58:59.423313 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-67c479cd85-6fgb4" podStartSLOduration=2.416284408 podStartE2EDuration="7.423208059s" podCreationTimestamp="2024-07-02 08:58:52 +0000 UTC" firstStartedPulling="2024-07-02 08:58:53.088914647 +0000 UTC m=+69.642347084" lastFinishedPulling="2024-07-02 08:58:58.095838288 +0000 UTC m=+74.649270735" observedRunningTime="2024-07-02 08:58:59.196419087 +0000 UTC m=+75.749851574" watchObservedRunningTime="2024-07-02 08:58:59.423208059 +0000 UTC m=+75.976640546" Jul 2 08:58:59.495000 audit[4651]: NETFILTER_CFG table=filter:124 family=2 entries=10 op=nft_register_rule pid=4651 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:59.495000 audit[4651]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7fff59fb08b0 a2=0 a3=7fff59fb089c items=0 ppid=2142 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:59.495000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:59.497000 audit[4651]: NETFILTER_CFG table=nat:125 family=2 entries=20 op=nft_register_rule pid=4651 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:59.497000 audit[4651]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff59fb08b0 a2=0 a3=7fff59fb089c items=0 ppid=2142 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:59.497000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:59.692000 audit[4653]: NETFILTER_CFG table=filter:126 family=2 entries=9 op=nft_register_rule pid=4653 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:59.692000 audit[4653]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7fffa2f66ed0 a2=0 a3=7fffa2f66ebc items=0 ppid=2142 pid=4653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:59.692000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:58:59.694000 audit[4653]: NETFILTER_CFG table=nat:127 family=2 entries=27 op=nft_register_chain pid=4653 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:58:59.694000 audit[4653]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fffa2f66ed0 a2=0 a3=7fffa2f66ebc items=0 ppid=2142 pid=4653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:58:59.694000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:59:00.043000 audit[4629]: AVC avc: denied { watch } for pid=4629 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_08_58_52.2483253060/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c563,c605 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c563,c605 tclass=file permissive=0 Jul 2 08:59:00.043000 audit[4629]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000bce1c0 a2=fc6 a3=0 items=0 ppid=4510 pid=4629 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c563,c605 key=(null) Jul 2 08:59:00.043000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 08:59:00.716000 audit[4655]: NETFILTER_CFG table=filter:128 family=2 entries=8 op=nft_register_rule pid=4655 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:59:00.716000 audit[4655]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffc336a3ea0 a2=0 a3=7ffc336a3e8c items=0 ppid=2142 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:00.716000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:59:00.723000 audit[4655]: NETFILTER_CFG table=nat:129 family=2 entries=34 op=nft_register_chain pid=4655 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:59:00.723000 audit[4655]: SYSCALL arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffc336a3ea0 a2=0 a3=7ffc336a3e8c items=0 ppid=2142 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:00.723000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:59:02.495833 systemd[1]: Started sshd@9-172.24.4.229:22-172.24.4.1:43560.service. Jul 2 08:59:02.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.229:22-172.24.4.1:43560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:03.912000 audit[4660]: USER_ACCT pid=4660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:03.916655 kernel: kauditd_printk_skb: 135 callbacks suppressed Jul 2 08:59:03.916790 kernel: audit: type=1101 audit(1719910743.912:1357): pid=4660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:03.916905 sshd[4660]: Accepted publickey for core from 172.24.4.1 port 43560 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:59:03.926000 audit[4660]: CRED_ACQ pid=4660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:03.939164 kernel: audit: type=1103 audit(1719910743.926:1358): pid=4660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:03.946053 kernel: audit: type=1006 audit(1719910743.926:1359): pid=4660 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 2 08:59:03.946207 kernel: audit: type=1300 audit(1719910743.926:1359): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd80df5910 a2=3 a3=0 items=0 ppid=1 pid=4660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:03.926000 audit[4660]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd80df5910 a2=3 a3=0 items=0 ppid=1 pid=4660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:03.946742 sshd[4660]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:59:03.926000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:03.963686 kernel: audit: type=1327 audit(1719910743.926:1359): proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:03.978713 systemd-logind[1128]: New session 10 of user core. Jul 2 08:59:03.979712 systemd[1]: Started session-10.scope. Jul 2 08:59:03.995000 audit[4660]: USER_START pid=4660 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:04.011838 kernel: audit: type=1105 audit(1719910743.995:1360): pid=4660 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:04.012178 kernel: audit: type=1103 audit(1719910744.009:1361): pid=4664 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:04.009000 audit[4664]: CRED_ACQ pid=4664 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:05.525002 sshd[4660]: pam_unix(sshd:session): session closed for user core Jul 2 08:59:05.525000 audit[4660]: USER_END pid=4660 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:05.539570 systemd[1]: sshd@9-172.24.4.229:22-172.24.4.1:43560.service: Deactivated successfully. Jul 2 08:59:05.539961 kernel: audit: type=1106 audit(1719910745.525:1362): pid=4660 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:05.542378 systemd[1]: session-10.scope: Deactivated successfully. Jul 2 08:59:05.525000 audit[4660]: CRED_DISP pid=4660 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:05.547357 systemd-logind[1128]: Session 10 logged out. Waiting for processes to exit. Jul 2 08:59:05.549842 kernel: audit: type=1104 audit(1719910745.525:1363): pid=4660 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:05.549946 kernel: audit: type=1131 audit(1719910745.539:1364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.229:22-172.24.4.1:43560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:05.539000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.229:22-172.24.4.1:43560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:05.552515 systemd-logind[1128]: Removed session 10. Jul 2 08:59:10.528110 systemd[1]: Started sshd@10-172.24.4.229:22-172.24.4.1:43518.service. Jul 2 08:59:10.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.229:22-172.24.4.1:43518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:10.536866 kernel: audit: type=1130 audit(1719910750.528:1365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.229:22-172.24.4.1:43518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:12.183000 audit[4681]: USER_ACCT pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:12.185372 sshd[4681]: Accepted publickey for core from 172.24.4.1 port 43518 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:59:12.195711 kernel: audit: type=1101 audit(1719910752.183:1366): pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:12.195000 audit[4681]: CRED_ACQ pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:12.198312 sshd[4681]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:59:12.267018 kernel: audit: type=1103 audit(1719910752.195:1367): pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:12.267124 kernel: audit: type=1006 audit(1719910752.195:1368): pid=4681 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 2 08:59:12.267183 kernel: audit: type=1300 audit(1719910752.195:1368): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea062beb0 a2=3 a3=0 items=0 ppid=1 pid=4681 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:12.267241 kernel: audit: type=1327 audit(1719910752.195:1368): proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:12.272306 kernel: audit: type=1105 audit(1719910752.253:1369): pid=4681 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:12.272391 kernel: audit: type=1103 audit(1719910752.266:1370): pid=4683 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:12.195000 audit[4681]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea062beb0 a2=3 a3=0 items=0 ppid=1 pid=4681 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:12.195000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:12.253000 audit[4681]: USER_START pid=4681 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:12.266000 audit[4683]: CRED_ACQ pid=4683 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:12.238360 systemd-logind[1128]: New session 11 of user core. Jul 2 08:59:12.239018 systemd[1]: Started session-11.scope. Jul 2 08:59:12.916308 sshd[4681]: pam_unix(sshd:session): session closed for user core Jul 2 08:59:12.917000 audit[4681]: USER_END pid=4681 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:12.921680 systemd[1]: sshd@10-172.24.4.229:22-172.24.4.1:43518.service: Deactivated successfully. Jul 2 08:59:12.925681 systemd-logind[1128]: Session 11 logged out. Waiting for processes to exit. Jul 2 08:59:12.933976 kernel: audit: type=1106 audit(1719910752.917:1371): pid=4681 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:12.934073 kernel: audit: type=1104 audit(1719910752.917:1372): pid=4681 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:12.917000 audit[4681]: CRED_DISP pid=4681 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:12.933533 systemd[1]: session-11.scope: Deactivated successfully. Jul 2 08:59:12.935054 systemd-logind[1128]: Removed session 11. Jul 2 08:59:12.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.229:22-172.24.4.1:43518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:17.909974 systemd[1]: Started sshd@11-172.24.4.229:22-172.24.4.1:36712.service. Jul 2 08:59:17.985194 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 08:59:17.985349 kernel: audit: type=1130 audit(1719910757.908:1374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.229:22-172.24.4.1:36712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:17.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.229:22-172.24.4.1:36712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:19.437000 audit[4745]: USER_ACCT pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:19.469022 kernel: audit: type=1101 audit(1719910759.437:1375): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:19.469200 kernel: audit: type=1103 audit(1719910759.448:1376): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:19.469264 kernel: audit: type=1006 audit(1719910759.448:1377): pid=4745 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Jul 2 08:59:19.448000 audit[4745]: CRED_ACQ pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:19.469465 sshd[4745]: Accepted publickey for core from 172.24.4.1 port 36712 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:59:19.465947 systemd[1]: Started session-12.scope. Jul 2 08:59:19.448000 audit[4745]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7c8d5fa0 a2=3 a3=0 items=0 ppid=1 pid=4745 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:19.448000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:19.452663 sshd[4745]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:59:19.469730 systemd-logind[1128]: New session 12 of user core. Jul 2 08:59:19.486713 kernel: audit: type=1300 audit(1719910759.448:1377): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7c8d5fa0 a2=3 a3=0 items=0 ppid=1 pid=4745 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:19.486853 kernel: audit: type=1327 audit(1719910759.448:1377): proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:19.482000 audit[4745]: USER_START pid=4745 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:19.501418 kernel: audit: type=1105 audit(1719910759.482:1378): pid=4745 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:19.501761 kernel: audit: type=1103 audit(1719910759.498:1379): pid=4753 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:19.498000 audit[4753]: CRED_ACQ pid=4753 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:20.369669 sshd[4745]: pam_unix(sshd:session): session closed for user core Jul 2 08:59:20.372456 systemd[1]: Started sshd@12-172.24.4.229:22-172.24.4.1:36724.service. Jul 2 08:59:20.373000 audit[4745]: USER_END pid=4745 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:20.384712 kernel: audit: type=1106 audit(1719910760.373:1380): pid=4745 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:20.384842 kernel: audit: type=1104 audit(1719910760.373:1381): pid=4745 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:20.373000 audit[4745]: CRED_DISP pid=4745 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:20.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.229:22-172.24.4.1:36724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:20.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.229:22-172.24.4.1:36712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:20.380975 systemd[1]: sshd@11-172.24.4.229:22-172.24.4.1:36712.service: Deactivated successfully. Jul 2 08:59:20.382444 systemd[1]: session-12.scope: Deactivated successfully. Jul 2 08:59:20.386278 systemd-logind[1128]: Session 12 logged out. Waiting for processes to exit. Jul 2 08:59:20.387823 systemd-logind[1128]: Removed session 12. Jul 2 08:59:21.794000 audit[4762]: USER_ACCT pid=4762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:21.797235 sshd[4762]: Accepted publickey for core from 172.24.4.1 port 36724 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:59:21.796000 audit[4762]: CRED_ACQ pid=4762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:21.797000 audit[4762]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca8814a30 a2=3 a3=0 items=0 ppid=1 pid=4762 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:21.797000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:21.799482 sshd[4762]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:59:21.814722 systemd-logind[1128]: New session 13 of user core. Jul 2 08:59:21.816040 systemd[1]: Started session-13.scope. Jul 2 08:59:21.827000 audit[4762]: USER_START pid=4762 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:21.831000 audit[4765]: CRED_ACQ pid=4765 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:21.988861 systemd[1]: run-containerd-runc-k8s.io-24660212a94d3873722f38fdef8c9ed9f91a8a3f01cdf97572b7a3bd2cdbcca0-runc.vXbR5U.mount: Deactivated successfully. Jul 2 08:59:22.700397 sshd[4762]: pam_unix(sshd:session): session closed for user core Jul 2 08:59:22.704000 audit[4762]: USER_END pid=4762 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:22.704000 audit[4762]: CRED_DISP pid=4762 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:22.708291 systemd[1]: Started sshd@13-172.24.4.229:22-172.24.4.1:36736.service. Jul 2 08:59:22.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.229:22-172.24.4.1:36736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:22.710003 systemd[1]: sshd@12-172.24.4.229:22-172.24.4.1:36724.service: Deactivated successfully. Jul 2 08:59:22.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.229:22-172.24.4.1:36724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:22.711311 systemd[1]: session-13.scope: Deactivated successfully. Jul 2 08:59:22.712384 systemd-logind[1128]: Session 13 logged out. Waiting for processes to exit. Jul 2 08:59:22.714442 systemd-logind[1128]: Removed session 13. Jul 2 08:59:24.237000 audit[4789]: USER_ACCT pid=4789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:24.241306 sshd[4789]: Accepted publickey for core from 172.24.4.1 port 36736 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:59:24.241913 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 2 08:59:24.242024 kernel: audit: type=1101 audit(1719910764.237:1393): pid=4789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:24.251000 audit[4789]: CRED_ACQ pid=4789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:24.253872 sshd[4789]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:59:24.264080 kernel: audit: type=1103 audit(1719910764.251:1394): pid=4789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:24.274698 kernel: audit: type=1006 audit(1719910764.251:1395): pid=4789 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 2 08:59:24.274670 systemd-logind[1128]: New session 14 of user core. Jul 2 08:59:24.251000 audit[4789]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffccc1dfdc0 a2=3 a3=0 items=0 ppid=1 pid=4789 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:24.279866 systemd[1]: Started session-14.scope. Jul 2 08:59:24.281728 kernel: audit: type=1300 audit(1719910764.251:1395): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffccc1dfdc0 a2=3 a3=0 items=0 ppid=1 pid=4789 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:24.251000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:24.285648 kernel: audit: type=1327 audit(1719910764.251:1395): proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:24.289000 audit[4789]: USER_START pid=4789 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:24.296765 kernel: audit: type=1105 audit(1719910764.289:1396): pid=4789 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:24.295000 audit[4792]: CRED_ACQ pid=4792 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:24.303602 kernel: audit: type=1103 audit(1719910764.295:1397): pid=4792 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:25.295503 sshd[4789]: pam_unix(sshd:session): session closed for user core Jul 2 08:59:25.300000 audit[4789]: USER_END pid=4789 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:25.301000 audit[4789]: CRED_DISP pid=4789 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:25.323391 kernel: audit: type=1106 audit(1719910765.300:1398): pid=4789 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:25.323650 kernel: audit: type=1104 audit(1719910765.301:1399): pid=4789 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:25.324843 systemd[1]: sshd@13-172.24.4.229:22-172.24.4.1:36736.service: Deactivated successfully. Jul 2 08:59:25.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.229:22-172.24.4.1:36736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:25.327126 systemd[1]: session-14.scope: Deactivated successfully. Jul 2 08:59:25.336657 kernel: audit: type=1131 audit(1719910765.323:1400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.229:22-172.24.4.1:36736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:25.338221 systemd-logind[1128]: Session 14 logged out. Waiting for processes to exit. Jul 2 08:59:25.341970 systemd-logind[1128]: Removed session 14. Jul 2 08:59:30.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.229:22-172.24.4.1:54920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:30.306029 systemd[1]: Started sshd@14-172.24.4.229:22-172.24.4.1:54920.service. Jul 2 08:59:30.317663 kernel: audit: type=1130 audit(1719910770.305:1401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.229:22-172.24.4.1:54920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:31.629000 audit[4809]: USER_ACCT pid=4809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:31.632733 sshd[4809]: Accepted publickey for core from 172.24.4.1 port 54920 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:59:31.642682 kernel: audit: type=1101 audit(1719910771.629:1402): pid=4809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:31.643000 audit[4809]: CRED_ACQ pid=4809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:31.665043 kernel: audit: type=1103 audit(1719910771.643:1403): pid=4809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:31.665273 kernel: audit: type=1006 audit(1719910771.646:1404): pid=4809 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 2 08:59:31.665346 kernel: audit: type=1300 audit(1719910771.646:1404): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee5511ba0 a2=3 a3=0 items=0 ppid=1 pid=4809 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:31.646000 audit[4809]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee5511ba0 a2=3 a3=0 items=0 ppid=1 pid=4809 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:31.667512 sshd[4809]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:59:31.646000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:31.681663 kernel: audit: type=1327 audit(1719910771.646:1404): proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:31.694307 systemd-logind[1128]: New session 15 of user core. Jul 2 08:59:31.695023 systemd[1]: Started session-15.scope. Jul 2 08:59:31.708000 audit[4809]: USER_START pid=4809 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:31.718311 kernel: audit: type=1105 audit(1719910771.708:1405): pid=4809 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:31.718452 kernel: audit: type=1103 audit(1719910771.716:1406): pid=4815 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:31.716000 audit[4815]: CRED_ACQ pid=4815 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:32.458423 sshd[4809]: pam_unix(sshd:session): session closed for user core Jul 2 08:59:32.466000 audit[4809]: USER_END pid=4809 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:32.470000 audit[4809]: CRED_DISP pid=4809 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:32.490077 kernel: audit: type=1106 audit(1719910772.466:1407): pid=4809 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:32.490264 kernel: audit: type=1104 audit(1719910772.470:1408): pid=4809 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:32.498947 systemd[1]: sshd@14-172.24.4.229:22-172.24.4.1:54920.service: Deactivated successfully. Jul 2 08:59:32.501157 systemd[1]: session-15.scope: Deactivated successfully. Jul 2 08:59:32.497000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.229:22-172.24.4.1:54920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:32.502917 systemd-logind[1128]: Session 15 logged out. Waiting for processes to exit. Jul 2 08:59:32.506390 systemd-logind[1128]: Removed session 15. Jul 2 08:59:35.525000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:35.529216 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 08:59:35.529390 kernel: audit: type=1400 audit(1719910775.525:1410): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:35.525000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002a38380 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:59:35.540154 kernel: audit: type=1300 audit(1719910775.525:1410): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002a38380 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:59:35.525000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:59:35.525000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:35.583568 kernel: audit: type=1327 audit(1719910775.525:1410): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:59:35.583720 kernel: audit: type=1400 audit(1719910775.525:1411): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:35.583795 kernel: audit: type=1300 audit(1719910775.525:1411): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002013860 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:59:35.525000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002013860 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:59:35.525000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:59:35.606626 kernel: audit: type=1327 audit(1719910775.525:1411): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:59:36.179000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:36.179000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c006ec6990 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:59:36.191332 kernel: audit: type=1400 audit(1719910776.179:1412): avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:36.191508 kernel: audit: type=1300 audit(1719910776.179:1412): arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c006ec6990 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:59:36.179000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:59:36.181000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:36.200787 kernel: audit: type=1327 audit(1719910776.179:1412): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:59:36.200960 kernel: audit: type=1400 audit(1719910776.181:1413): avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:36.181000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00f461bc0 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:59:36.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:59:36.282000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526900 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:36.282000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c009ace090 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:59:36.282000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:59:36.332000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=526906 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:36.332000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00ef80030 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:59:36.332000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:59:36.332000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:36.332000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00f939380 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:59:36.332000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:59:36.342000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:36.342000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00ef80750 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 08:59:36.342000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:59:37.471200 systemd[1]: Started sshd@15-172.24.4.229:22-172.24.4.1:33892.service. Jul 2 08:59:37.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.229:22-172.24.4.1:33892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:38.910000 audit[4826]: USER_ACCT pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:38.913226 sshd[4826]: Accepted publickey for core from 172.24.4.1 port 33892 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:59:38.919000 audit[4826]: CRED_ACQ pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:38.921000 audit[4826]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8c568550 a2=3 a3=0 items=0 ppid=1 pid=4826 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:38.921000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:38.958288 sshd[4826]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:59:39.036768 systemd-logind[1128]: New session 16 of user core. Jul 2 08:59:39.037420 systemd[1]: Started session-16.scope. Jul 2 08:59:39.052000 audit[4826]: USER_START pid=4826 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:39.056000 audit[4828]: CRED_ACQ pid=4828 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:39.839560 sshd[4826]: pam_unix(sshd:session): session closed for user core Jul 2 08:59:39.843000 audit[4826]: USER_END pid=4826 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:39.844000 audit[4826]: CRED_DISP pid=4826 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:39.849531 systemd[1]: sshd@15-172.24.4.229:22-172.24.4.1:33892.service: Deactivated successfully. Jul 2 08:59:39.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.229:22-172.24.4.1:33892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:39.852367 systemd[1]: session-16.scope: Deactivated successfully. Jul 2 08:59:39.855705 systemd-logind[1128]: Session 16 logged out. Waiting for processes to exit. Jul 2 08:59:39.858279 systemd-logind[1128]: Removed session 16. Jul 2 08:59:44.852729 systemd[1]: Started sshd@16-172.24.4.229:22-172.24.4.1:45472.service. Jul 2 08:59:44.866546 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 2 08:59:44.867008 kernel: audit: type=1130 audit(1719910784.852:1427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.229:22-172.24.4.1:45472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:44.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.229:22-172.24.4.1:45472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:46.204000 audit[4845]: USER_ACCT pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:46.207134 sshd[4845]: Accepted publickey for core from 172.24.4.1 port 45472 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:59:46.217666 kernel: audit: type=1101 audit(1719910786.204:1428): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:46.216000 audit[4845]: CRED_ACQ pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:46.219575 sshd[4845]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:59:46.228707 kernel: audit: type=1103 audit(1719910786.216:1429): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:46.236963 kernel: audit: type=1006 audit(1719910786.216:1430): pid=4845 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 2 08:59:46.237111 kernel: audit: type=1300 audit(1719910786.216:1430): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc02a0b5e0 a2=3 a3=0 items=0 ppid=1 pid=4845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:46.216000 audit[4845]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc02a0b5e0 a2=3 a3=0 items=0 ppid=1 pid=4845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:46.216000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:46.252367 kernel: audit: type=1327 audit(1719910786.216:1430): proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:46.258265 systemd-logind[1128]: New session 17 of user core. Jul 2 08:59:46.261276 systemd[1]: Started session-17.scope. Jul 2 08:59:46.266000 audit[4845]: USER_START pid=4845 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:46.279000 audit[4847]: CRED_ACQ pid=4847 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:46.285660 kernel: audit: type=1105 audit(1719910786.266:1431): pid=4845 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:46.285741 kernel: audit: type=1103 audit(1719910786.279:1432): pid=4847 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:46.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.229:22-172.24.4.1:45486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:46.946444 systemd[1]: Started sshd@17-172.24.4.229:22-172.24.4.1:45486.service. Jul 2 08:59:46.952643 sshd[4845]: pam_unix(sshd:session): session closed for user core Jul 2 08:59:46.963734 kernel: audit: type=1130 audit(1719910786.945:1433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.229:22-172.24.4.1:45486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:46.963926 kernel: audit: type=1106 audit(1719910786.955:1434): pid=4845 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:46.955000 audit[4845]: USER_END pid=4845 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:46.960507 systemd[1]: sshd@16-172.24.4.229:22-172.24.4.1:45472.service: Deactivated successfully. Jul 2 08:59:46.962232 systemd[1]: session-17.scope: Deactivated successfully. Jul 2 08:59:46.967687 systemd-logind[1128]: Session 17 logged out. Waiting for processes to exit. Jul 2 08:59:46.971072 systemd-logind[1128]: Removed session 17. Jul 2 08:59:46.956000 audit[4845]: CRED_DISP pid=4845 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:46.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.229:22-172.24.4.1:45472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:47.510116 systemd[1]: run-containerd-runc-k8s.io-fefa91c0f20fd6514cca5bc6df63e08d4576f3562119ba891e61cc47ade7e4ea-runc.OozOzT.mount: Deactivated successfully. Jul 2 08:59:48.575000 audit[4856]: USER_ACCT pid=4856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:48.579079 sshd[4856]: Accepted publickey for core from 172.24.4.1 port 45486 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:59:48.581000 audit[4856]: CRED_ACQ pid=4856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:48.581000 audit[4856]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffcfac6830 a2=3 a3=0 items=0 ppid=1 pid=4856 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:48.581000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:48.584614 sshd[4856]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:59:48.599055 systemd-logind[1128]: New session 18 of user core. Jul 2 08:59:48.600460 systemd[1]: Started session-18.scope. Jul 2 08:59:48.614000 audit[4856]: USER_START pid=4856 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:48.618000 audit[4880]: CRED_ACQ pid=4880 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:49.996080 systemd[1]: Started sshd@18-172.24.4.229:22-172.24.4.1:45494.service. Jul 2 08:59:49.997929 sshd[4856]: pam_unix(sshd:session): session closed for user core Jul 2 08:59:50.002201 kernel: kauditd_printk_skb: 9 callbacks suppressed Jul 2 08:59:50.002428 kernel: audit: type=1130 audit(1719910789.997:1442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.229:22-172.24.4.1:45494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:49.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.229:22-172.24.4.1:45494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:50.013000 audit[4856]: USER_END pid=4856 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:50.022250 systemd[1]: sshd@17-172.24.4.229:22-172.24.4.1:45486.service: Deactivated successfully. Jul 2 08:59:50.024064 systemd[1]: session-18.scope: Deactivated successfully. Jul 2 08:59:50.027293 systemd-logind[1128]: Session 18 logged out. Waiting for processes to exit. Jul 2 08:59:50.028886 kernel: audit: type=1106 audit(1719910790.013:1443): pid=4856 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:50.013000 audit[4856]: CRED_DISP pid=4856 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:50.033346 systemd-logind[1128]: Removed session 18. Jul 2 08:59:50.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.229:22-172.24.4.1:45486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:50.054170 kernel: audit: type=1104 audit(1719910790.013:1444): pid=4856 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:50.055049 kernel: audit: type=1131 audit(1719910790.019:1445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.229:22-172.24.4.1:45486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:51.451000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:51.463645 kernel: audit: type=1400 audit(1719910791.451:1446): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:51.463845 kernel: audit: type=1300 audit(1719910791.451:1446): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00135c9a0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:59:51.451000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00135c9a0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:59:51.451000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:59:51.490680 kernel: audit: type=1327 audit(1719910791.451:1446): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:59:51.490816 kernel: audit: type=1400 audit(1719910791.452:1447): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:51.452000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:51.452000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00135c9e0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:59:51.518063 kernel: audit: type=1300 audit(1719910791.452:1447): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00135c9e0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:59:51.519472 kernel: audit: type=1327 audit(1719910791.452:1447): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:59:51.452000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:59:51.464000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:51.464000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00135cd80 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:59:51.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:59:51.464000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:59:51.464000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00135cdc0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 08:59:51.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:59:51.903000 audit[4892]: USER_ACCT pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:51.907721 sshd[4892]: Accepted publickey for core from 172.24.4.1 port 45494 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:59:51.905000 audit[4892]: CRED_ACQ pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:51.905000 audit[4892]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9e410720 a2=3 a3=0 items=0 ppid=1 pid=4892 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:51.905000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:51.909795 sshd[4892]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:59:51.920685 systemd[1]: Started session-19.scope. Jul 2 08:59:51.921567 systemd-logind[1128]: New session 19 of user core. Jul 2 08:59:51.939000 audit[4892]: USER_START pid=4892 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:51.942000 audit[4899]: CRED_ACQ pid=4899 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:51.993817 systemd[1]: run-containerd-runc-k8s.io-24660212a94d3873722f38fdef8c9ed9f91a8a3f01cdf97572b7a3bd2cdbcca0-runc.tN7drS.mount: Deactivated successfully. Jul 2 08:59:54.785000 audit[4926]: NETFILTER_CFG table=filter:130 family=2 entries=20 op=nft_register_rule pid=4926 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:59:54.785000 audit[4926]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffdca7e4b00 a2=0 a3=7ffdca7e4aec items=0 ppid=2142 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:54.785000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:59:54.789000 audit[4926]: NETFILTER_CFG table=nat:131 family=2 entries=22 op=nft_register_rule pid=4926 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:59:54.789000 audit[4926]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffdca7e4b00 a2=0 a3=0 items=0 ppid=2142 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:54.789000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:59:54.801000 audit[4928]: NETFILTER_CFG table=filter:132 family=2 entries=32 op=nft_register_rule pid=4928 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:59:54.801000 audit[4928]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffe2287ad00 a2=0 a3=7ffe2287acec items=0 ppid=2142 pid=4928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:54.801000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:59:54.802000 audit[4928]: NETFILTER_CFG table=nat:133 family=2 entries=22 op=nft_register_rule pid=4928 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:59:54.802000 audit[4928]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe2287ad00 a2=0 a3=0 items=0 ppid=2142 pid=4928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:54.802000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:59:55.029161 sshd[4892]: pam_unix(sshd:session): session closed for user core Jul 2 08:59:55.043177 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 2 08:59:55.043302 kernel: audit: type=1106 audit(1719910795.031:1459): pid=4892 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:55.031000 audit[4892]: USER_END pid=4892 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:55.035478 systemd[1]: sshd@18-172.24.4.229:22-172.24.4.1:45494.service: Deactivated successfully. Jul 2 08:59:55.056299 kernel: audit: type=1104 audit(1719910795.031:1460): pid=4892 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:55.059344 kernel: audit: type=1131 audit(1719910795.034:1461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.229:22-172.24.4.1:45494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:55.031000 audit[4892]: CRED_DISP pid=4892 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:55.034000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.229:22-172.24.4.1:45494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:55.042518 systemd[1]: Started sshd@19-172.24.4.229:22-172.24.4.1:35592.service. Jul 2 08:59:55.047799 systemd[1]: session-19.scope: Deactivated successfully. Jul 2 08:59:55.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.229:22-172.24.4.1:35592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:55.071081 systemd-logind[1128]: Session 19 logged out. Waiting for processes to exit. Jul 2 08:59:55.076982 systemd-logind[1128]: Removed session 19. Jul 2 08:59:55.080179 kernel: audit: type=1130 audit(1719910795.045:1462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.229:22-172.24.4.1:35592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:56.621163 sshd[4931]: Accepted publickey for core from 172.24.4.1 port 35592 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:59:56.619000 audit[4931]: USER_ACCT pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:56.633680 kernel: audit: type=1101 audit(1719910796.619:1463): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:56.632000 audit[4931]: CRED_ACQ pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:56.634689 sshd[4931]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:59:56.652344 kernel: audit: type=1103 audit(1719910796.632:1464): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:56.652463 kernel: audit: type=1006 audit(1719910796.632:1465): pid=4931 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Jul 2 08:59:56.652555 kernel: audit: type=1300 audit(1719910796.632:1465): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd06ed7080 a2=3 a3=0 items=0 ppid=1 pid=4931 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:56.632000 audit[4931]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd06ed7080 a2=3 a3=0 items=0 ppid=1 pid=4931 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:56.632000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:56.671010 kernel: audit: type=1327 audit(1719910796.632:1465): proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:56.677636 systemd-logind[1128]: New session 20 of user core. Jul 2 08:59:56.679172 systemd[1]: Started session-20.scope. Jul 2 08:59:56.692000 audit[4931]: USER_START pid=4931 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:56.708854 kernel: audit: type=1105 audit(1719910796.692:1466): pid=4931 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:56.706000 audit[4933]: CRED_ACQ pid=4933 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:58.269393 sshd[4931]: pam_unix(sshd:session): session closed for user core Jul 2 08:59:58.270000 audit[4931]: USER_END pid=4931 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:58.270000 audit[4931]: CRED_DISP pid=4931 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:58.276228 systemd[1]: sshd@19-172.24.4.229:22-172.24.4.1:35592.service: Deactivated successfully. Jul 2 08:59:58.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.229:22-172.24.4.1:35592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:58.278974 systemd[1]: session-20.scope: Deactivated successfully. Jul 2 08:59:58.281544 systemd-logind[1128]: Session 20 logged out. Waiting for processes to exit. Jul 2 08:59:58.286989 systemd[1]: Started sshd@20-172.24.4.229:22-172.24.4.1:35606.service. Jul 2 08:59:58.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.229:22-172.24.4.1:35606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:59:58.290764 systemd-logind[1128]: Removed session 20. Jul 2 08:59:58.831000 audit[4589]: AVC avc: denied { watch } for pid=4589 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_08_58_52.3426123079/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c473 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c83,c473 tclass=file permissive=0 Jul 2 08:59:58.831000 audit[4589]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a63fa0 a2=fc6 a3=0 items=0 ppid=4460 pid=4589 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c473 key=(null) Jul 2 08:59:58.831000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 08:59:59.800000 audit[4947]: USER_ACCT pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:59.802180 sshd[4947]: Accepted publickey for core from 172.24.4.1 port 35606 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:59:59.802000 audit[4947]: CRED_ACQ pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:59.802000 audit[4947]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebe8f6e30 a2=3 a3=0 items=0 ppid=1 pid=4947 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:59:59.802000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:59:59.804270 sshd[4947]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:59:59.812806 systemd[1]: Started session-21.scope. Jul 2 08:59:59.813283 systemd-logind[1128]: New session 21 of user core. Jul 2 08:59:59.820000 audit[4947]: USER_START pid=4947 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:59:59.823000 audit[4949]: CRED_ACQ pid=4949 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:00.045000 audit[4629]: AVC avc: denied { watch } for pid=4629 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_08_58_52.2483253060/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c563,c605 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c563,c605 tclass=file permissive=0 Jul 2 09:00:00.048947 kernel: kauditd_printk_skb: 15 callbacks suppressed Jul 2 09:00:00.049048 kernel: audit: type=1400 audit(1719910800.045:1478): avc: denied { watch } for pid=4629 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_08_58_52.2483253060/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c563,c605 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c563,c605 tclass=file permissive=0 Jul 2 09:00:00.045000 audit[4629]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0013c2c20 a2=fc6 a3=0 items=0 ppid=4510 pid=4629 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c563,c605 key=(null) Jul 2 09:00:00.074764 kernel: audit: type=1300 audit(1719910800.045:1478): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0013c2c20 a2=fc6 a3=0 items=0 ppid=4510 pid=4629 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c563,c605 key=(null) Jul 2 09:00:00.045000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 09:00:00.095705 kernel: audit: type=1327 audit(1719910800.045:1478): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 09:00:00.520070 sshd[4947]: pam_unix(sshd:session): session closed for user core Jul 2 09:00:00.520000 audit[4947]: USER_END pid=4947 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:00.528051 systemd[1]: sshd@20-172.24.4.229:22-172.24.4.1:35606.service: Deactivated successfully. Jul 2 09:00:00.528673 kernel: audit: type=1106 audit(1719910800.520:1479): pid=4947 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:00.529150 systemd[1]: session-21.scope: Deactivated successfully. Jul 2 09:00:00.520000 audit[4947]: CRED_DISP pid=4947 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:00.526000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.229:22-172.24.4.1:35606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:00.540353 systemd-logind[1128]: Session 21 logged out. Waiting for processes to exit. Jul 2 09:00:00.550096 kernel: audit: type=1104 audit(1719910800.520:1480): pid=4947 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:00.550279 kernel: audit: type=1131 audit(1719910800.526:1481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.229:22-172.24.4.1:35606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:00.552485 systemd-logind[1128]: Removed session 21. Jul 2 09:00:04.908000 audit[4964]: NETFILTER_CFG table=filter:134 family=2 entries=20 op=nft_register_rule pid=4964 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 09:00:04.908000 audit[4964]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffee1405100 a2=0 a3=7ffee14050ec items=0 ppid=2142 pid=4964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 09:00:04.931773 kernel: audit: type=1325 audit(1719910804.908:1482): table=filter:134 family=2 entries=20 op=nft_register_rule pid=4964 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 09:00:04.931991 kernel: audit: type=1300 audit(1719910804.908:1482): arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffee1405100 a2=0 a3=7ffee14050ec items=0 ppid=2142 pid=4964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 09:00:04.908000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 09:00:04.938899 kernel: audit: type=1327 audit(1719910804.908:1482): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 09:00:04.914000 audit[4964]: NETFILTER_CFG table=nat:135 family=2 entries=106 op=nft_register_chain pid=4964 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 09:00:04.914000 audit[4964]: SYSCALL arch=c000003e syscall=46 success=yes exit=49452 a0=3 a1=7ffee1405100 a2=0 a3=7ffee14050ec items=0 ppid=2142 pid=4964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 09:00:04.914000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 09:00:04.949676 kernel: audit: type=1325 audit(1719910804.914:1483): table=nat:135 family=2 entries=106 op=nft_register_chain pid=4964 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 09:00:05.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.229:22-172.24.4.1:43282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:05.534747 systemd[1]: Started sshd@21-172.24.4.229:22-172.24.4.1:43282.service. Jul 2 09:00:05.538373 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 2 09:00:05.538442 kernel: audit: type=1130 audit(1719910805.533:1484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.229:22-172.24.4.1:43282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:06.867000 audit[4967]: USER_ACCT pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:06.870761 sshd[4967]: Accepted publickey for core from 172.24.4.1 port 43282 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 09:00:06.872000 audit[4967]: CRED_ACQ pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:06.878306 sshd[4967]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 09:00:06.878543 kernel: audit: type=1101 audit(1719910806.867:1485): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:06.878620 kernel: audit: type=1103 audit(1719910806.872:1486): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:06.878664 kernel: audit: type=1006 audit(1719910806.872:1487): pid=4967 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 2 09:00:06.872000 audit[4967]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde42bd590 a2=3 a3=0 items=0 ppid=1 pid=4967 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 09:00:06.886655 kernel: audit: type=1300 audit(1719910806.872:1487): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde42bd590 a2=3 a3=0 items=0 ppid=1 pid=4967 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 09:00:06.886746 kernel: audit: type=1327 audit(1719910806.872:1487): proctitle=737368643A20636F7265205B707269765D Jul 2 09:00:06.872000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 09:00:06.888431 systemd[1]: Started session-22.scope. Jul 2 09:00:06.889226 systemd-logind[1128]: New session 22 of user core. Jul 2 09:00:06.896000 audit[4967]: USER_START pid=4967 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:06.903616 kernel: audit: type=1105 audit(1719910806.896:1488): pid=4967 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:06.903000 audit[4969]: CRED_ACQ pid=4969 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:06.911624 kernel: audit: type=1103 audit(1719910806.903:1489): pid=4969 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:07.857750 sshd[4967]: pam_unix(sshd:session): session closed for user core Jul 2 09:00:07.857000 audit[4967]: USER_END pid=4967 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:07.861628 systemd[1]: sshd@21-172.24.4.229:22-172.24.4.1:43282.service: Deactivated successfully. Jul 2 09:00:07.863292 systemd[1]: session-22.scope: Deactivated successfully. Jul 2 09:00:07.864225 systemd-logind[1128]: Session 22 logged out. Waiting for processes to exit. Jul 2 09:00:07.865342 systemd-logind[1128]: Removed session 22. Jul 2 09:00:07.868443 kernel: audit: type=1106 audit(1719910807.857:1490): pid=4967 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:07.868504 kernel: audit: type=1104 audit(1719910807.858:1491): pid=4967 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:07.858000 audit[4967]: CRED_DISP pid=4967 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:07.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.229:22-172.24.4.1:43282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:12.871566 systemd[1]: Started sshd@22-172.24.4.229:22-172.24.4.1:43290.service. Jul 2 09:00:12.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.229:22-172.24.4.1:43290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:12.875624 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 09:00:12.875783 kernel: audit: type=1130 audit(1719910812.870:1493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.229:22-172.24.4.1:43290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:14.167000 audit[4983]: USER_ACCT pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:14.169469 sshd[4983]: Accepted publickey for core from 172.24.4.1 port 43290 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 09:00:14.180000 audit[4983]: CRED_ACQ pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:14.183868 sshd[4983]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 09:00:14.194724 kernel: audit: type=1101 audit(1719910814.167:1494): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:14.194894 kernel: audit: type=1103 audit(1719910814.180:1495): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:14.202061 kernel: audit: type=1006 audit(1719910814.181:1496): pid=4983 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 2 09:00:14.181000 audit[4983]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2b34aa90 a2=3 a3=0 items=0 ppid=1 pid=4983 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 09:00:14.181000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 09:00:14.218241 kernel: audit: type=1300 audit(1719910814.181:1496): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2b34aa90 a2=3 a3=0 items=0 ppid=1 pid=4983 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 09:00:14.218373 kernel: audit: type=1327 audit(1719910814.181:1496): proctitle=737368643A20636F7265205B707269765D Jul 2 09:00:14.222178 systemd-logind[1128]: New session 23 of user core. Jul 2 09:00:14.224973 systemd[1]: Started session-23.scope. Jul 2 09:00:14.241000 audit[4983]: USER_START pid=4983 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:14.257060 kernel: audit: type=1105 audit(1719910814.241:1497): pid=4983 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:14.256000 audit[4987]: CRED_ACQ pid=4987 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:14.269720 kernel: audit: type=1103 audit(1719910814.256:1498): pid=4987 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:14.948754 sshd[4983]: pam_unix(sshd:session): session closed for user core Jul 2 09:00:14.948000 audit[4983]: USER_END pid=4983 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:14.948000 audit[4983]: CRED_DISP pid=4983 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:14.958865 kernel: audit: type=1106 audit(1719910814.948:1499): pid=4983 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:14.958961 kernel: audit: type=1104 audit(1719910814.948:1500): pid=4983 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:14.960316 systemd[1]: sshd@22-172.24.4.229:22-172.24.4.1:43290.service: Deactivated successfully. Jul 2 09:00:14.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.229:22-172.24.4.1:43290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:14.962572 systemd[1]: session-23.scope: Deactivated successfully. Jul 2 09:00:14.965152 systemd-logind[1128]: Session 23 logged out. Waiting for processes to exit. Jul 2 09:00:14.970153 systemd-logind[1128]: Removed session 23. Jul 2 09:00:16.817278 systemd[1]: run-containerd-runc-k8s.io-24660212a94d3873722f38fdef8c9ed9f91a8a3f01cdf97572b7a3bd2cdbcca0-runc.I1hqMu.mount: Deactivated successfully. Jul 2 09:00:19.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.229:22-172.24.4.1:52594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:19.961309 systemd[1]: Started sshd@23-172.24.4.229:22-172.24.4.1:52594.service. Jul 2 09:00:19.964883 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 09:00:19.966952 kernel: audit: type=1130 audit(1719910819.960:1502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.229:22-172.24.4.1:52594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:21.368000 audit[5049]: USER_ACCT pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:21.372520 sshd[5049]: Accepted publickey for core from 172.24.4.1 port 52594 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 09:00:21.382677 kernel: audit: type=1101 audit(1719910821.368:1503): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:21.381000 audit[5049]: CRED_ACQ pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:21.393692 kernel: audit: type=1103 audit(1719910821.381:1504): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:21.395173 sshd[5049]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 09:00:21.404657 kernel: audit: type=1006 audit(1719910821.381:1505): pid=5049 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 2 09:00:21.381000 audit[5049]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5c9ab700 a2=3 a3=0 items=0 ppid=1 pid=5049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 09:00:21.415740 kernel: audit: type=1300 audit(1719910821.381:1505): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5c9ab700 a2=3 a3=0 items=0 ppid=1 pid=5049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 09:00:21.381000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 09:00:21.420672 kernel: audit: type=1327 audit(1719910821.381:1505): proctitle=737368643A20636F7265205B707269765D Jul 2 09:00:21.421727 systemd-logind[1128]: New session 24 of user core. Jul 2 09:00:21.424917 systemd[1]: Started session-24.scope. Jul 2 09:00:21.437000 audit[5049]: USER_START pid=5049 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:21.451718 kernel: audit: type=1105 audit(1719910821.437:1506): pid=5049 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:21.450000 audit[5051]: CRED_ACQ pid=5051 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:21.460666 kernel: audit: type=1103 audit(1719910821.450:1507): pid=5051 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:22.271541 sshd[5049]: pam_unix(sshd:session): session closed for user core Jul 2 09:00:22.272000 audit[5049]: USER_END pid=5049 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:22.287310 systemd[1]: sshd@23-172.24.4.229:22-172.24.4.1:52594.service: Deactivated successfully. Jul 2 09:00:22.287712 kernel: audit: type=1106 audit(1719910822.272:1508): pid=5049 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:22.288217 systemd[1]: session-24.scope: Deactivated successfully. Jul 2 09:00:22.274000 audit[5049]: CRED_DISP pid=5049 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:22.298391 systemd-logind[1128]: Session 24 logged out. Waiting for processes to exit. Jul 2 09:00:22.298611 kernel: audit: type=1104 audit(1719910822.274:1509): pid=5049 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:22.300166 systemd-logind[1128]: Removed session 24. Jul 2 09:00:22.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.229:22-172.24.4.1:52594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:27.282034 systemd[1]: Started sshd@24-172.24.4.229:22-172.24.4.1:56808.service. Jul 2 09:00:27.289738 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 09:00:27.289973 kernel: audit: type=1130 audit(1719910827.282:1511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.229:22-172.24.4.1:56808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:27.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.229:22-172.24.4.1:56808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:28.469000 audit[5087]: USER_ACCT pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:28.471653 sshd[5087]: Accepted publickey for core from 172.24.4.1 port 56808 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 09:00:28.482690 kernel: audit: type=1101 audit(1719910828.469:1512): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:28.480000 audit[5087]: CRED_ACQ pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:28.483989 sshd[5087]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 09:00:28.493838 kernel: audit: type=1103 audit(1719910828.480:1513): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:28.501642 kernel: audit: type=1006 audit(1719910828.480:1514): pid=5087 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 2 09:00:28.502788 kernel: audit: type=1300 audit(1719910828.480:1514): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc80c358b0 a2=3 a3=0 items=0 ppid=1 pid=5087 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 09:00:28.480000 audit[5087]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc80c358b0 a2=3 a3=0 items=0 ppid=1 pid=5087 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 09:00:28.480000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 09:00:28.518655 kernel: audit: type=1327 audit(1719910828.480:1514): proctitle=737368643A20636F7265205B707269765D Jul 2 09:00:28.521738 systemd-logind[1128]: New session 25 of user core. Jul 2 09:00:28.524055 systemd[1]: Started session-25.scope. Jul 2 09:00:28.540000 audit[5087]: USER_START pid=5087 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:28.557967 kernel: audit: type=1105 audit(1719910828.540:1515): pid=5087 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:28.543000 audit[5089]: CRED_ACQ pid=5089 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:28.568657 kernel: audit: type=1103 audit(1719910828.543:1516): pid=5089 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:29.482440 sshd[5087]: pam_unix(sshd:session): session closed for user core Jul 2 09:00:29.484000 audit[5087]: USER_END pid=5087 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:29.489304 systemd-logind[1128]: Session 25 logged out. Waiting for processes to exit. Jul 2 09:00:29.492300 systemd[1]: sshd@24-172.24.4.229:22-172.24.4.1:56808.service: Deactivated successfully. Jul 2 09:00:29.493944 systemd[1]: session-25.scope: Deactivated successfully. Jul 2 09:00:29.497833 systemd-logind[1128]: Removed session 25. Jul 2 09:00:29.484000 audit[5087]: CRED_DISP pid=5087 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:29.517631 kernel: audit: type=1106 audit(1719910829.484:1517): pid=5087 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:29.517829 kernel: audit: type=1104 audit(1719910829.484:1518): pid=5087 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:29.491000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.229:22-172.24.4.1:56808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:34.496988 systemd[1]: Started sshd@25-172.24.4.229:22-172.24.4.1:56814.service. Jul 2 09:00:34.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.229:22-172.24.4.1:56814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:34.501689 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 09:00:34.501978 kernel: audit: type=1130 audit(1719910834.496:1520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.229:22-172.24.4.1:56814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:35.527000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 09:00:35.527000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002494b60 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 09:00:35.554202 kernel: audit: type=1400 audit(1719910835.527:1521): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 09:00:35.554414 kernel: audit: type=1300 audit(1719910835.527:1521): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002494b60 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 09:00:35.527000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 09:00:35.566112 kernel: audit: type=1327 audit(1719910835.527:1521): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 09:00:35.527000 audit[1864]: AVC avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 09:00:35.577197 kernel: audit: type=1400 audit(1719910835.527:1522): avc: denied { watch } for pid=1864 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 09:00:35.527000 audit[1864]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001309cb0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 09:00:35.527000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 09:00:35.602955 kernel: audit: type=1300 audit(1719910835.527:1522): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001309cb0 a2=fc6 a3=0 items=0 ppid=1714 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c167,c884 key=(null) Jul 2 09:00:35.603086 kernel: audit: type=1327 audit(1719910835.527:1522): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 09:00:35.782000 audit[5104]: USER_ACCT pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:35.791262 sshd[5104]: Accepted publickey for core from 172.24.4.1 port 56814 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 09:00:35.795678 kernel: audit: type=1101 audit(1719910835.782:1523): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:35.794000 audit[5104]: CRED_ACQ pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:35.798139 sshd[5104]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 09:00:35.814674 kernel: audit: type=1103 audit(1719910835.794:1524): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:35.815096 kernel: audit: type=1006 audit(1719910835.794:1525): pid=5104 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Jul 2 09:00:35.794000 audit[5104]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb89c1c20 a2=3 a3=0 items=0 ppid=1 pid=5104 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 09:00:35.794000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 09:00:35.826185 systemd-logind[1128]: New session 26 of user core. Jul 2 09:00:35.830206 systemd[1]: Started session-26.scope. Jul 2 09:00:35.852000 audit[5104]: USER_START pid=5104 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:35.856000 audit[5106]: CRED_ACQ pid=5106 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:36.182000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 09:00:36.182000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=60 a1=c006ceb6b0 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 09:00:36.182000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 09:00:36.182000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 09:00:36.182000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c00598c460 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 09:00:36.182000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 09:00:36.283000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526900 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 09:00:36.283000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=60 a1=c006c26ab0 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 09:00:36.283000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 09:00:36.333000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=526906 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 09:00:36.333000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=60 a1=c006c26d80 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 09:00:36.333000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 09:00:36.333000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 09:00:36.333000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=60 a1=c00598c700 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 09:00:36.333000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 09:00:36.344000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 09:00:36.344000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=60 a1=c006ceb770 a2=fc6 a3=0 items=0 ppid=1719 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c916 key=(null) Jul 2 09:00:36.344000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 09:00:36.614406 sshd[5104]: pam_unix(sshd:session): session closed for user core Jul 2 09:00:36.615000 audit[5104]: USER_END pid=5104 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:36.615000 audit[5104]: CRED_DISP pid=5104 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 09:00:36.619882 systemd[1]: sshd@25-172.24.4.229:22-172.24.4.1:56814.service: Deactivated successfully. Jul 2 09:00:36.621547 systemd[1]: session-26.scope: Deactivated successfully. Jul 2 09:00:36.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.229:22-172.24.4.1:56814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 09:00:36.623432 systemd-logind[1128]: Session 26 logged out. Waiting for processes to exit. Jul 2 09:00:36.626630 systemd-logind[1128]: Removed session 26.